v1.0.3 agents-v0.2.111
qdm12/dnsSep 15, 2026 → Sep 15, 20260 days between releases
What's New
Switches focus from web application security patches to database driver improvements for Oracle modes and character data handling
New Features
- OceanBase Oracle mode manual transaction control support
- DB2 malformed character data tolerance
- GBase 8s backtick identifier quote sanitization
Improvements
- Access-code tokens now enforce a 7-day server-side lifetime
- Render service now injects CSP to guard against untrusted HTML execution
- Audio provider requests block DNS rebinding and validate every redirect hop
Bug Fixes
- Fixes critical unauthenticated remote code execution in Next.js
- Sanitizes backtick identifier quotes for GBase 8s
- Tolerates malformed character data in DB2
- Supports manual transaction control in OceanBase Oracle mode
Upgrade Notes
The provided notes describe two different projects, so there are no direct upgrade paths. For the web application, ensure `TRUST_PROXY_HEADERS` is configured correctly for the new rate limiting. For the database agents, verify compatibility with the updated GBase, DB2, and OceanBase drivers.
The Two Releases
OpenMAIC v1.0.3 — Security
Sep 15, 2026· 1 month ago
A security release published September 15, 2026, that patches critical vulnerabilities including a Next.js RCE, access-code token expiration, and render service CSP issues.
Full release notesagents-v0.2.111
Sep 15, 2026· 1 month ago
Updates agent libraries for various database drivers, focusing on specific fixes for character data handling and transaction control in Oracle modes.
Full release notes