v2026.10.5 v1.1.3

high risk

gohugoio/hugoOct 5, 2026 → Oct 5, 20260 days between releases

What's New

Security release sanitizes slide HTML to prevent script injection vulnerabilities.

Breaking Changes

  • Slide HTML is reduced to formatting vocabulary
  • Scripts, event handlers, and embedded objects are removed
  • Inline styles are re-serialized without spaces

Improvements

  • Server-side sanitization of slide HTML in `/api/persistence`
  • Fixes GHSA-6c52-8h4v

Bug Fixes

  • Fixes GHSA-6c52-8h4v

Upgrade Notes

Read Behavior Changes before upgrading. Documents stored earlier are served clean. Inline style formatting changes may affect rendering.

The Two Releases

v2026.10.5

v2026.10.5

Oct 5, 2026· 17 days ago

Fixes test suite compatibility on Windows and improves ADB parsing and manifest handling for the Mobile Verification Toolkit.

Full release notes
v1.1.3

OpenMAIC v1.1.3 — Security

Oct 5, 2026· 17 days ago

A security release that sanitizes slide HTML in course documents to prevent script injection vulnerabilities.

Full release notes