Starstruk Logo MarkStarstruk

11.0.309

electroplix/Design-System11.0.309Aug 6, 2026by adubovikov

AI Summary

Addresses a security vulnerability by blocking authenticated users from escalating to admin roles via a specific API endpoint.

Key Highlights

  • Security fix blocks self-assigned admin role via PATCH /api/v4/users/:id.
  • Addresses GHSA-24vc-w334-95wm security advisory.

Full Release Notes

## What's Changed
* fix(security): block self-assigned admin role (GHSA-24vc-w334-95wm) by @adubovikov in https://github.com/sipcapture/homer/pull/920
* chore: bump version to 11.0.308 by @adubovikov in https://github.com/sipcapture/homer/pull/919

Security: authenticated users can no longer escalate to admin via `PATCH /api/v4/users/:id` with `user_group`.

**Full Changelog**: https://github.com/sipcapture/homer/compare/11.0.308...11.0.309