v1.1.1 agents-v0.2.122
medium risk
stanfordnlp/dspySep 26, 2026 → Sep 27, 20261 day between releases
What's New
Security patch for MinerU Cloud and driver updates for Dameng, IoTDB, Kafka, and Oracle
Breaking Changes
- Address-policy refusals are no longer retried in MinerU Cloud provider transport validation.
New Features
- IPv4-compatible IPv6 addresses are now classified by their embedded IPv4.
Improvements
- JSON responses and ZIP downloads are now size-bounded to prevent decompression bombs.
- Table DDL metadata lookup is faster for Dameng.
- Kafka connections skip reverse DNS for SASL IP brokers.
Bug Fixes
- Fixed SSRF vulnerability in MinerU Cloud URL fetching.
- Fixed Dameng character length display.
- Fixed IoTDB RPC compression recognition.
- Fixed Kafka connection timeouts on Windows.
- Fixed Oracle dblink alias projection.
Upgrade Notes
Self-hosted setups are unaffected by the SSRF changes due to the ALLOW_LOCAL_NETWORKS policy. Be aware that Kafka driver updates skip reverse DNS for SASL IP brokers, which may affect log parsing.
The Two Releases
v1.1.1
OpenMAIC v1.1.1 — Security
Sep 26, 2026· 26 days ago
A security release addressing Server-Side Request Forgery (SSRF) vulnerabilities in MinerU Cloud parsing. The update implements strict provider transport validation and size limits for downloads.
Full release notesagents-v0.2.122
agents-v0.2.122
Sep 27, 2026· 25 days ago
Driver updates for Dameng, Apache IoTDB, Kafka, and Oracle to fix parsing errors and connection issues.
Full release notes