v0.6.2 v1.1.3
high risk
parruda/swarmOct 5, 2026 → Oct 5, 20260 days between releases
What's New
Security release sanitizes course documents to prevent XSS via `/api/persistence` endpoint
Breaking Changes
- Slide HTML via `/api/persistence` strips scripts and `javascript:` URLs.
- Inline styles are re-serialized without spaces.
New Features
- Course documents are now sanitized to remove scripts and malicious HTML.
Improvements
- Security enhancement: `/api/persistence` applies the same sanitization policy as `/api/classroom`.
Bug Fixes
- Fixes XSS vulnerability by sanitizing stored and retrieved course document HTML.
Upgrade Notes
Existing documents stored via `/api/persistence` will be sanitized on read. Note that inline styles will be serialized without spaces and scripts will be removed.
The Two Releases
v0.6.2
v0.6.2
Oct 5, 2026· 17 days ago
This release prioritizes stability and robustness by improving cache validation mechanisms and ensuring graceful shutdowns for the MCP server.
Full release notesv1.1.3
OpenMAIC v1.1.3 — Security
Oct 5, 2026· 17 days ago
A security release that sanitizes course documents served by `/api/persistence` to prevent XSS attacks by stripping scripts and malicious HTML attributes.
Full release notes