Starstruk Logo MarkStarstruk

11.0.309

sipcapture/homer11.0.309Aug 6, 2026by adubovikov

AI Summary

Fixes a vulnerability allowing authenticated users to escalate privileges to admin via the user API.

Key Highlights

  • Prevent user escalation to admin via `PATCH /api/v4/users/:id` with `user_group`.
  • Fix security vulnerability GHSA-24vc-w334-95wm.

Full Release Notes

## What's Changed
* fix(security): block self-assigned admin role (GHSA-24vc-w334-95wm) by @adubovikov in https://github.com/sipcapture/homer/pull/920
* chore: bump version to 11.0.308 by @adubovikov in https://github.com/sipcapture/homer/pull/919

Security: authenticated users can no longer escalate to admin via `PATCH /api/v4/users/:id` with `user_group`.

**Full Changelog**: https://github.com/sipcapture/homer/compare/11.0.308...11.0.309