v0.8.13 v1.1.4
high risk
Z4nzu/hackingtoolOct 9, 2026 → Oct 11, 20262 days between releases
What's New
Security release addressing model authorization, render job ownership, and legacy media cleanup.
Breaking Changes
- Server-managed model authorization now requires explicit `*_MODELS` configuration.
- Mixed service versions will fail closed for render jobs without proper configuration.
New Features
- Providers using server credentials now authorize selected models before access.
- Render jobs are strictly bound to the requesting owner.
- Deleted courses stop serving legacy classroom media URLs.
Improvements
- Render jobs are bound to the requesting owner to ensure proper access control.
- Legacy classroom media stops being served when its course is deleted.
- Providers using server credentials now authorize selected models.
Bug Fixes
- Fixed high-severity advisory GHSA-r2xp-m5r2-g7xj regarding missing model authorization.
- Fixed medium-severity advisory GHSA-x3gm-gw9m-94h9 regarding MP4 render job ownership.
- Fixed low-severity advisory GHSA-6jrw-cp5x-j8jc regarding legacy classroom media URLs.
Upgrade Notes
Upgrade the render-service together with or before the app. Server-managed model authorization now requires explicit `*_MODELS` configuration.
The Two Releases
v0.8.13
v0.8.13
Oct 9, 2026· 12 days ago
A feature-rich release adding HID support for new devices and improving UI/UX for mouse configuration.
Full release notesv1.1.4
OpenMAIC v1.1.4 — Security
Oct 11, 2026· 11 days ago
A security release addressing model authorization, render job ownership, and legacy media cleanup for server-managed providers.
Full release notes