v2026.9.25.4 v1.1.1
high risk
stanfordnlp/dspySep 26, 2026 → Sep 26, 20261 day between releases
What's New
Security release addresses SSRF vulnerabilities in MinerU Cloud parsing
Breaking Changes
- Address-policy refusals are no longer retried
- Upload URLs no longer follow redirects
New Features
- IPv4-compatible IPv6 addresses are now classified by their embedded IPv4
Improvements
- JSON responses and ZIP downloads are size-bounded
- Provider transport validation is now strict
Upgrade Notes
Self-hosted setups remain unaffected due to the ALLOW_LOCAL_NETWORKS policy, but deployments using MinerU Cloud must ensure the provider transport is configured correctly.
The Two Releases
v2026.9.25.4
v2026.9.25.4
Sep 26, 2026· 26 days ago
Bug fixes for agent composer mounting behavior, availability loading, and command routing.
Full release notesv1.1.1
OpenMAIC v1.1.1 — Security
Sep 26, 2026· 26 days ago
A security release addressing Server-Side Request Forgery (SSRF) vulnerabilities in MinerU Cloud parsing. The update implements strict provider transport validation and size limits for downloads.
Full release notes