MulmoClaude

v0.5.3 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 1mo LLM Frameworks

✓ No known CVEs patched

✓ No known CVEs patched in this version

Affected surfaces

rce_ssrf

Summary

AI summary

Sandbox mode files are now correctly bundled and --version reports the accurate version.

Full changelog

Sandbox mode silently disabled in 0.5.2 — Dockerfile.sandbox and sandbox-entrypoint.sh were not bundled into the published mulmoclaude tarball, so on npx mulmoclaude the server logged Failed to set up sandbox, running unrestricted and fell back to unrestricted execution. Both files are now copied by prepare-dist.js and listed in files, and the publish-smoke CI asserts their presence in the packed tarball to prevent regressions. (#966)
mulmoclaude --version printed stale 0.5.1 — the launcher had a hard-coded version string that drifted from package.json. Now matches the published version.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track MulmoClaude

Get notified when new releases ship.

About MulmoClaude

v0.6.4 `General` role split into lean `General` and new `Personal` role; Encore seed role pinned to Personal.