v2026.10.5 v1.1.3
medium risk
zeroclaw-labs/zeroclawOct 5, 2026 → Oct 5, 20260 days between releases
What's New
Security release addresses Stored XSS vulnerability via HTML sanitization.
Breaking Changes
- Slide HTML written through `/api/persistence` is stripped of scripts and inline styles
New Features
- HTML sanitization enforcement
Improvements
- Sanitization of slide HTML to prevent script execution
Bug Fixes
- Fixed parsing of ADB output with CRLF line endings
- Fixed flagging of backup files listed in manifest but not stored
Upgrade Notes
Existing documents are sanitized on the next read or write. Slide HTML written via `/api/persistence` is stripped of scripts, event handlers, and inline styles.
The Two Releases
v2026.10.5
v2026.10.5
Oct 5, 2026· 17 days ago
This release focuses on enhancing cross-platform compatibility and fixing parsing issues with Android dumpsys output and backup manifests.
Full release notesv1.1.3
OpenMAIC v1.1.3 — Security
Oct 5, 2026· 17 days ago
A security release addressing a Stored XSS vulnerability in course documents served via `/api/persistence` by implementing strict HTML sanitization policies.
Full release notes