OpenSandbox

vdocker/egress/v1.1.5 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 5h Containers & Orchestration

✓ No known CVEs patched

This release patches 1 known CVE

Topics

ai ai-agent ai-infra kubernetes sandbox

Affected surfaces

deps breaking_upgrade

Summary

AI summary

Updates 📦 Misc, 🐛 Bug Fixes, and ✨ Features across a mixed release.

Full changelog

Intercept extra TCP ports beyond 80/443 (experimental). New env var OPENSANDBOX_EGRESS_MITMPROXY_EXTRA_PORTS (comma-separated) appends extra destination ports to the transparent-mitm REDIRECT rule, with fail-closed validation. Note: extra ports are decrypted and logged but not yet matched against credential bindings. (#1379)

npm scoped packages no longer 403 under Credential Vault. A single-layer %2f (e.g. /@scope%2fname) is now allowed, while %2f that crosses a credential binding boundary — plus nested encodings, backslashes, and dot-segments — is still rejected. (#1369)
DNS survives deny.always overlays containing 127.0.0.0/8. In dns+nft mode, DNS redirected to 127.0.0.1:15353 is now accepted before the deny sets, so a loopback deny rule no longer breaks sandbox DNS under Docker. (#1380)
Purge stale mitmproxy CA on startup. egress now erases the exported CA early in startup so a co-restarting agent doesn't install a stale CA, fixing unable to get local issuer certificate on HTTPS from the agent. (#1371)

CVE patches for Go dependencies. grpc → v1.82.1 (xDS RBAC / HTTP/2) and postcss → 8.5.11 (#1385); x/net → v0.55.0 (HTML parser DoS) and x/crypto → v0.52.0 (13 SSH advisories), bringing modules to Go 1.25. (#1250)

License headers. Added missing Apache 2.0 headers to fix the verify-license CI workflow. (#1313)

Thanks to these contributors ❤️

Docker Hub: opensandbox/egress:v1.1.5
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.1.5
GHCR: ghcr.io/opensandbox-group/opensandbox/egress:v1.1.5

CVE patches: grpc updated to v1.82.1, postcss to 8.5.11, x/net to v0.55.0 (HTML parser DoS), x/crypto to v0.52.0 (13 SSH advisories); Go upgraded to 1.25

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.