v0.6.2 v1.1.3
high risk
imbhargav5/open-recorderOct 5, 2026 → Oct 5, 20260 days between releases
What's New
Security release fixes Stored XSS vulnerability by sanitizing slide HTML in /api/persistence.
Breaking Changes
- Slide HTML is sanitized on read and write, removing scripts, event handlers, and inline styles; clients relying on raw HTML or specific inline style formatting will break.
New Features
- Sanitization of slide HTML in /api/persistence to prevent script execution.
Improvements
- Security fix for Stored XSS vulnerability (GHSA-6c52-8h4v-5xvg).
Bug Fixes
- Stored XSS vulnerability in course documents served by /api/persistence.
Upgrade Notes
Clients relying on raw HTML or specific inline styles (e.g., text-align: center;) must be updated, as sanitization strips scripts and re-serializes inline styles without spaces.
The Two Releases
v0.6.2
v0.6.2
Oct 5, 2026· 17 days ago
A maintenance release focusing on workflow reliability and stability. It improves cache validation and ensures the MCP server exits cleanly under specific conditions.
Full release notesv1.1.3
OpenMAIC v1.1.3 — Security
Oct 5, 2026· 17 days ago
Security release fixing a Stored XSS vulnerability in course documents served by `/api/persistence` by sanitizing slide HTML.
Full release notes