OpenSandbox

vjs/sandbox/v0.1.8 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Containers & Orchestration

✓ No known CVEs patched

This release patches 1 known CVE

Topics

ai ai-agent ai-infra kubernetes sandbox

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 1mo

The release pins the transitive `fast-uri` dependency to version 3.1.2, resolving two high‑severity advisories.

Why it matters: Severity 90 security fix patches GHSA-q3j6-qgp7-74h6 and GHSA-v39h-62p7-jpjc; operators must upgrade to v0.1.8 immediately.

AI summary

Pinned the transitive fast-uri dependency to address high‑severity advisories.

Type	Severity	Summary	CVE
Security	Critical	Pinned transitive `fast-uri` dependency to 3.1.2 addressing GHSA‑q3j6‑qgpj‑74h6 and GHSA‑v39h‑62p7‑jpjc advisories. Pinned transitive `fast-uri` dependency to 3.1.2 addressing GHSA‑q3j6‑qgpj‑74h6 and GHSA‑v39h‑62p7‑jpjc advisories. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature
Feature	Medium	Added `skipAccumulation` support for execution handlers. Added `skipAccumulation` support for execution handlers. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Added SDK model support for PVC auto-provisioning fields. Added SDK model support for PVC auto-provisioning fields. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Added `secureAccess` support for sandbox creation and endpoint access headers (opt‑in, Kubernetes ingress gateway mode). Added `secureAccess` support for sandbox creation and endpoint access headers (opt‑in, Kubernetes ingress gateway mode). Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	/ping health check now treats empty HTTP 200 body as healthy while preserving error mapping for non‑2xx responses. /ping health check now treats empty HTTP 200 body as healthy while preserving error mapping for non‑2xx responses. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

Added skipAccumulation support for execution handlers. When enabled, stdout/stderr events are still delivered to callbacks but are not appended to accumulated execution logs, preventing unbounded memory growth for long-running streamed commands. https://github.com/opensandbox-group/OpenSandbox/pull/990
Added SDK model support for PVC auto-provisioning fields. https://github.com/opensandbox-group/OpenSandbox/pull/749
Added secureAccess support for sandbox creation and endpoint access headers. This is opt-in and currently supported by Kubernetes ingress gateway mode. https://github.com/opensandbox-group/OpenSandbox/pull/745

The /ping health check now treats an empty HTTP 200 response body as healthy while preserving existing error mapping for non-2xx responses. https://github.com/opensandbox-group/OpenSandbox/pull/905

Pinned the transitive fast-uri dependency to 3.1.2 to address high-severity advisories GHSA-q3j6-qgpj-74h6 and GHSA-v39h-62p7-jpjc. https://github.com/opensandbox-group/OpenSandbox/pull/909

dep: GHSA-q3j6-qgpj-74h6, dep: GHSA-v39h-62p7-jpjc — fast-uri pinned to 3.1.2 for high‑severity fixes.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.