Issues

• JS, C#, Go and Kotlin SDKs replay protected OpenSandbox headers on cross-origin redirects (Python strips them)

  opensandbox-group/OpenSandbox#2170 · Filter by author BigDataDZ opened on Oct 10, 2026
  7

• JS and C# code interpreter SDKs send OPEN-SANDBOX-API-KEY to execd in direct mode

  opensandbox-group/OpenSandbox#2148 · Filter by author JasonBuildAI opened on Oct 9, 2026

• [Help Wanted] Build an OpenSandbox plugin for DeepSeek Harness with fast-sandbox runtime support

  help wanted
  opensandbox-group/OpenSandbox#2134 · Filter by author jwx0925 opened on Oct 8, 2026
  4

• Proposal: best-effort rootfs recovery after abnormal sandbox termination

  opensandbox-group/OpenSandbox#2112 · Filter by author GodBlf opened on Oct 2, 2026
  1

• proposal: standalone operator console contribution (extends OSEP-0006 / #348, relates to #835)

  opensandbox-group/OpenSandbox#2039 · Filter by author hpliStartAgain opened on Sep 28, 2026

• Rewrite BatchSandbox pod-failure recovery on current main (supersedes #1523)

  bugcomponent/k8sgohelp wanted
  opensandbox-group/OpenSandbox#2008 · Filter by author Pangjiping opened on Sep 25, 2026
  1

• [Feature] SDK SandboxPool: dynamic / time-window-based pool sizing via a capacity-provider interface

  opensandbox-group/OpenSandbox#1964 · Filter by author Pangjiping opened on Sep 21, 2026
  2

• opensandbox-server 1.1.0 on PyPI is missing services/fast_sandbox/generated — the server fails to start (ModuleNotFoundError)

  opensandbox-group/OpenSandbox#1958 · Filter by author dcaminos opened on Sep 21, 2026
  2

  

• feat(docker): allow snapshotting a Paused sandbox on the Docker runtime

  opensandbox-group/OpenSandbox#1917 · Filter by author DrejT opened on Sep 18, 2026
  2

• Question: What happens to unsnapshotted rootfs data after OOM or abnormal container termination?

  opensandbox-group/OpenSandbox#1872 · Filter by author lingdie opened on Sep 16, 2026
  2

• [Feature] Support execution identity for file APIs to enforce per-session filesystem permissions

  opensandbox-group/OpenSandbox#1843 · Filter by author joM4ker opened on Sep 14, 2026
  5

• bug(docker): snapshots of gVisor (runsc) sandboxes silently drop all writes under runsc's default --overlay2=root:self

  opensandbox-group/OpenSandbox#1831 · Filter by author DrejT opened on Sep 13, 2026
  5

• Multi-Tenancy缺少一个admin权限的key

  opensandbox-group/OpenSandbox#1817 · Filter by author wlmvp opened on Sep 11, 2026
  1

• egress: make Credential Vault scoped-match enforcement default-on with explicit opt-out

  opensandbox-group/OpenSandbox#1776 · Filter by author Pangjiping opened on Sep 9, 2026
  

• execd isolated sessions: upper_max_bytes enforced only at allocation — writes uncapped, then all new sessions wedge

  opensandbox-group/OpenSandbox#1773 · Filter by author pandazhangS opened on Sep 9, 2026
  5

• Define core metrics/traces for BatchSandbox controller and systematically integrate OpenTelemetry

  opensandbox-group/OpenSandbox#1767 · Filter by author Pangjiping opened on Sep 8, 2026
  1

  

• Define core metrics/traces for OpenSandbox server and systematically integrate OpenTelemetry

  opensandbox-group/OpenSandbox#1766 · Filter by author Pangjiping opened on Sep 8, 2026
  1

  

• Credential Vault: binding match uses the Host header alone, letting a workload steer an injected credential to another TLS peer

  opensandbox-group/OpenSandbox#1758 · Filter by author changren-wcr opened on Sep 8, 2026

• Add credential-bound TLS interception for Credential Vault

  opensandbox-group/OpenSandbox#1713 · Filter by author hpliStartAgain opened on Sep 4, 2026
  

• egress sidecar start fails intermittently: host port probe misses OS-reserved ranges (Docker Desktop/Windows) and start failure is not retried with a new port

  opensandbox-group/OpenSandbox#1702 · Filter by author SummerSec opened on Sep 2, 2026

• Is a pool-mode sandbox created without env/entrypoint expected to be unusable?

  opensandbox-group/OpenSandbox#1692 · Filter by author megumiss opened on Sep 1, 2026

• Support fenced durable materialization: metadata CAS, resolved image digest, and trusted setup

  opensandbox-group/OpenSandbox#1690 · Filter by author makutaku opened on Aug 31, 2026
  4

• [Feature] Add opt-in KVM access for Linux Docker sandboxes

  opensandbox-group/OpenSandbox#1676 · Filter by author kernalix7 opened on Aug 30, 2026

• feat(egress): support port-scoped egress rules (target-optional ports)

  opensandbox-group/OpenSandbox#1647 · Filter by author changren-wcr opened on Aug 26, 2026
  

• Standard Sandbox API/SDKs: no way to attach a caller-supplied sidecar container (only one main container + the fixed built-in egress sidecar)

  opensandbox-group/OpenSandbox#1598 · Filter by author ferponse opened on Aug 22, 2026
  2