v0.6.2 v1.1.3

high risk

QwenLM/Qwen-MM-PluginsOct 5, 2026 → Oct 5, 20260 days between releases

What's New

Security release sanitizes slide HTML in `/api/persistence` to prevent script injection.

Breaking Changes

  • Slide HTML formatting vocabulary reduced
  • Scripts and inline styles removed from persisted documents

New Features

  • Sanitization policy applied to persistence layer

Improvements

  • Security fix preventing script execution in course documents
  • Existing documents sanitized on read

Upgrade Notes

Existing documents in `/api/persistence` will be sanitized on read. Note that scripts, event handlers, and inline styles are removed from persisted HTML. Verify that any client-side logic relying on these elements is updated.

The Two Releases

v0.6.2

v0.6.2

Oct 5, 2026· 17 days ago

This release focuses on stability improvements including pinning release workflows and fixing MCP server exit behavior to handle edge cases properly.

Full release notes
v1.1.3

OpenMAIC v1.1.3 — Security

Oct 5, 2026· 17 days ago

A security release that sanitizes course document HTML stored in `/api/persistence` to prevent script injection vulnerabilities.

Full release notes