Search results

AMD SEV-SNP support design and production readiness blockers

documentationImprovements or additions to documentationImprovements or additions to documentation

proposal

Status: Open.

#713 In Dstack-TEE/dstack;

· h4x3rotab opened on Jun 5, 2026

vmm-cli update --compose with --env-file silently drops compose changes when allowed_envs differs

Status: Open.

#707 In Dstack-TEE/dstack;

· lloydmak99 opened on Jun 3, 2026

Onboarding audit: cut 'time to first dstack app' from ~22 steps to a single script

Status: Open.

#699 In Dstack-TEE/dstack;

· h4x3rotab opened on May 28, 2026

Security: KMS get_kms_key bypasses attestation when quote_enabled=false, exposing root secrets

Status: Open.

#609 In Dstack-TEE/dstack;

· kvinwang opened on Mar 27, 2026

Security: DevMode auth API unconditionally allows all apps and KMS replication

Status: Open.

#608 In Dstack-TEE/dstack;

· kvinwang opened on Mar 27, 2026

Security: Gateway TLS verification disabled when gateway_app_id == "any"

Status: Open.

#607 In Dstack-TEE/dstack;

· kvinwang opened on Mar 27, 2026

Security: App keys and decrypted env vars written with world-readable permissions

Status: Open.

#606 In Dstack-TEE/dstack;

· kvinwang opened on Mar 27, 2026

Security: Guest agent derives identical key material for ed25519 and secp256k1

Status: Open.

#605 In Dstack-TEE/dstack;

· kvinwang opened on Mar 27, 2026

Unbounded allocation in VecOf decode

Status: Open.

#567 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Gzip decompression bomb in RA-TLS cert extension

Status: Open.

#566 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

get_app_env_encrypt_pub_key unauthenticated — app_id enumeration

Status: Open.

#564 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

simulate_quote patches report_data at hardcoded offset with no build-time guard

Status: Open.

#563 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026