What's New in Nullafi Shield v3.10.1

v3.10.1Released: August 18, 2026 · Container image: public.ecr.aws/nullafi/shield:v3.10.1

Overview

Version 3.10.1 is a hotfix that corrects proxy authentication behavior after the custom group header was introduced in 3.10.0.

Full list of resolved issues and quality improvements in this release.

Type	Description	ID
Fix	Fixed an issue where ICAP proxy authentication could still recognize the built-in Username or Groups header names in addition to the header an administrator explicitly configured, which could cause proxy authentication to behave unpredictably. Proxy authentication now uses only the header the administrator has configured.	NS-715

Follow these steps before upgrading in production. Estimated time: 10 minutes.

Back up your database and configuration files Take a full snapshot of your database and export your current configuration — including your .env and any custom policy files. Store backups off-instance before proceeding.
Pull and deploy the updated container image
```
docker pull public.ecr.aws/nullafi/shield:v3.10.1
```
Configure your container runtime scripts or commands to use the new image. (If using Nullafi's sample Docker Compose files, modify the .env file so that SHIELD_IMAGE points to the new image.) Restart the Shield service after pulling the updated image.