11.0.342
sipcapture/homer11.0.342Sep 9, 2026by adubovikov
AI Summary
This release prioritizes security by patching an SQL injection vulnerability in the /exec endpoint and updating multiple dependencies. It also includes a UI improvement that sets the default search results table to display oldest entries first.
Key Highlights
- Fixed SQL injection vulnerability in POST /exec endpoint
- Updated dependencies (hono, js-yaml, grpc) for security
- UI fix: Default search results to oldest-first
New Features
- Default search results table to oldest-first
- Parameterized POST /exec to close SQL injection
Full Release Notes
## What's Changed * fix(ui): default search results table to oldest-first by @adubovikov in https://github.com/sipcapture/homer/pull/1015 * fix(security): parameterize POST /exec to close SQL injection by @adubovikov in https://github.com/sipcapture/homer/pull/1014 * fix(security): bump hono 4.13.7 and js-yaml 4.3.2 by @adubovikov in https://github.com/sipcapture/homer/pull/1013 * chore(deps): bump @vitest/mocker by @dependabot in https://github.com/sipcapture/homer/pull/1012 * fix(security): bump google.golang.org/grpc to 1.83.2 by @adubovikov in https://github.com/sipcapture/homer/pull/1010 **Full Changelog**: https://github.com/sipcapture/homer/compare/11.0.341...11.0.342