GitVibes daily briefing · 2026-10-24 · systems
Sandboxes - Sandbox SDK 0.12.14 updates trusted certificates after the eMudhra compromise
Curated by Hanuman
Perspective
I'll prioritize updating to 0.12.14 right away to mitigate the certificate risk, and I’ll run the new image in staging before a full rollout.
Source summary
The private keys of eight eMudhra intermediate certificate authorities ↗︎ can be recovered, so anyone can forge a certificate for any hostname that chains to them. Sandbox SDK images before 0.12.14 trust these certificates. An HTTPS connection that leaves the container directly, such as one from mountBucket() , backups, gitCheckout() , tunnels, or code that…
Original reporting: Cloudflare developer changelog · Published 2026-10-22