Summary

This release is about security and platform upkeep. We've updated the core frameworks and third-party libraries that ProctorExam runs on to address security vulnerabilities, and we've added automated checks that catch new vulnerabilities earlier. You don't need to do anything, and how you use the platform hasn't changed.

Please note that 3rd party package vulnerabilities don’t necessarily translate into direct security vulnerabilities in our own software, as we may not be exposed to them. There aren’t any known security vulnerabilities in our platform. 

Improvements to existing features

• Security updates to core frameworks: We've updated the application framework and its web server components to the latest patched versions. This resolves several security findings.

• Security updates to browser-side libraries: We've updated a large set of third-party libraries used in the web interface. This resolves all major security findings.

• Updated runtime environment: The platform now runs on a current, long-term-supported JavaScript runtime. This brings ongoing security patches and better performance and stability.

Signaling Release:  

This release makes video recording more reliable. It improves how the platform recovers from rare recording interruptions so that footage is preserved, and it frees up recording resources more cleanly once an exam ends. You don't need to do anything, and the exam experience for students and proctors hasn't changed.

• Faster cleanup after exams end: When a student disconnects after finishing an exam, the platform now releases that session's recording resources right away instead of waiting for a possible reconnection. Sessions still in progress keep the reconnection grace period, so students who drop out mid-exam can still rejoin. This also makes cleanup more reliable during platform maintenance and updates.

• Recording recovery: In rare cases, the recording service could stop responding to health checks. This left the session without an active recording and could cause footage to be lost. The platform now detects this and restarts the recording service automatically, so recording continues with as little interruption as possible.