From 014dca297784f920025d2bec18a132884c8cd7d6 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Wed, 7 Oct 2026 12:13:25 +0000 Subject: [PATCH] chore: add changeset for Jupyter Unix socket isolation (#343) Signed-off-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-Authored-By: mish@e2b.dev --- .changeset/jupyter-unix-socket.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/jupyter-unix-socket.md diff --git a/.changeset/jupyter-unix-socket.md b/.changeset/jupyter-unix-socket.md new file mode 100644 index 00000000..b5b2ed6c --- /dev/null +++ b/.changeset/jupyter-unix-socket.md @@ -0,0 +1,5 @@ +--- +'@e2b/code-interpreter-template': patch +--- + +Isolate Jupyter behind a private Unix socket (`/run/e2b-jupyter/server.sock`, mode `0600`) instead of TCP port 8888, so Jupyter's HTTP API, kernel WebSockets, and interrupts are no longer reachable over the sandbox network interface.