| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
Sanity-Gravity is a Sandbox. Its primary purpose is to contain untrusted execution.
If you find a way to escape the container (break out of the sandbox) or gain unauthorized access to the host machine through sanity-gravity's default configuration, this is a critical vulnerability.
Please report it by:
- Opening a GitHub Issue with the label
security. - AND/OR emailing the maintainer directly.
- In Scope: Docker escape, Privilege escalation from container to host, Unintentional exposure of host files (beyond mapped workspace).
- Out of Scope: Vulnerabilities within the guest OS (Ubuntu) that do not impact the host, or issues arising from user-configured insecure volume mounts.