Docker Sandboxes CVE-2026-77179 and CVE-2026-79994: when the agent VM can still reach the host

·4 views

Docker Sandboxes CVE-2026-77179 and CVE-2026-79994: when the agent VM can still reach the host Docker Sandboxes is the feature that runs an AI coding agent inside a purpose-built virtual machine, so that whatever the agent does stays out of the developer's environment. In September 2026 Docker published two advisories showing that a process inside that virtual machine could reach the host anyway. The first issue is CVE-2026-77179. It affects the virtio-fs host server used to share files with the sandbox, in versions from 0.28.0 up to but not including 0.42.0. Docker rated it critical and the C

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Making a desktop pet feel present: animation, window motion, and the quiet moments

A dog can look convincing in a video and still look wrong when it walks across a desktop. We ran into that while building Mocha Casa, a Windows pet companion made with Electron and JavaScript. This is a development note from our own project. The useful part is the small set of problems behind the demo: synchronizing movement, handling transitions, and giving the user control over a companion that shares their workspace. The intent is to let someone see a familiar pet beside their work, especially when the real dog or cat cannot sit there.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

A VIN Validation Checklist for Car Marketplace Developers

If you run a car marketplace, classifieds site or dealer tool, the VIN field is your best defense against bad listings, but only if you validate it properly. A check-digit test alone isn't enough. Here's a layered checklist, from cheap input checks to cross-checking the listing. Trim whitespace, remove spaces and dashes, uppercase everything. Don't silently "fix" I, O and Q to 1/0.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

GrassMate: The AI That Tells You to Stop Using AI

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 1: Touch Grass Close your laptop. Go outside. Come back happier. GrassMate is a small web app with one job: get you away from it as fast as possible. You tell it three things: how much time you have, what the weather is like, and where you are (park, beach, forest, village or city).

0 comments Read more at DEV Community

ProgrammingDEV Community ·

VIN Position 11 Deep Dive: Plant Codes, Why They Are Manufacturer-Specific, and How to Use Them

Position 11 of a 17-character VIN identifies the assembly plant. It's one of the most useful characters for spotting mismatches and understanding recalls, and also one of the most misunderstood, because unlike the model year code it has no universal table. This post explains how it works and how to use it correctly in code and when buying a car. Under NHTSA's VIN rule (49 CFR Part 565), position 11 must identify the plant of manufacture, and each manufacturer defines its own plant codes and submits them to NHTSA. ISO 3779 leaves position 11 to the manufacturer too.

0 comments Read more at DEV Community