v0.6.2 v1.1.3

Name: ECC
Author: affaan-m

high risk

affaan-m/ECCOct 5, 2026 → Oct 5, 20260 days between releases

What's New

Security release fixes XSS vulnerability and alters slide HTML formatting.

Breaking Changes

Slide HTML formatting is reduced to the renderer's vocabulary.
Inline styles are re-serialized without spaces (e.g., `text-align:center`).

Improvements

Sanitizes slide HTML to prevent Cross-Site Scripting (XSS) execution.
Applies consistent sanitization policy between `/api/classroom` and `/api/persistence`.

Bug Fixes

Fixes XSS vulnerability in `/api/persistence` (GHSA-6c52-8h4v-5xvg).

Upgrade Notes

Slide HTML formatting is now restricted to the renderer's vocabulary, and inline styles are serialized without spaces. Existing documents may render differently.

The Two Releases

v0.6.2

Oct 5, 2026· 17 days ago

This release focuses on stability and process handling, including pinning workflow actions, improving cache validation logic, and ensuring the MCP server exits gracefully on signals.

Full release notes

v1.1.3

OpenMAIC v1.1.3 — Security

Oct 5, 2026· 17 days ago

A security release fixing Cross-Site Scripting (XSS) vulnerabilities in course document persistence. The update sanitizes slide HTML to prevent script execution in the browser.

Full release notes