Cloudflare Sandbox SDK v0.12.13:修复 eMudhra 证书漏洞
@cloudflare/[email protected]
推荐理由
eMudhra 证书漏洞影响 HTTPS 连接,必须升级镜像才能恢复稳定;注意 Bun 用户需等待上游修复。
Patch Changes
补丁更新
- #1023 a4eaa89 Thanks @ghostwriternr! - Stop trusting certificates from the compromised eMudhra intermediate CAs in the container images. The images now ship the updated Ubuntu and Alpine CA bundles, Node.js 22.23.4, cloudflared 2026.10.2, and pip 26.2.2 in the -python image. Bun keeps trusting these certificates until it releases a fix, which affects bun, opencode, and multipart uploads in createBackup() for archives of 10 MiB or more. Update the container image to get this fix. See the eMudhra certificate compromise for details.
- #1023 a4eaa89 感谢 @ghostwriternr!- 停止信任容器镜像中来自受损 eMudhra 中间 CA 的证书。镜像现在随附更新的 Ubuntu 和 Alpine CA 包、Node.js 22.23.4、cloudflared 2026.10.2,以及 -python 镜像中的 pip 26.2.2。Bun 在发布修复版本前仍会信任这些证书,这会影响 bun、opencode 以及 createBackup() 中用于 10 MiB 及以上归档的多部分上传。请更新容器镜像以获取此修复。有关详情,请参阅 eMudhra 证书泄露事件。
更进一步:量化金融体系
看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力