11.0.342

sipcapture/homer11.0.342Sep 9, 2026by adubovikov

AI Summary

This release prioritizes security by patching an SQL injection vulnerability in the /exec endpoint and updating multiple dependencies. It also includes a UI improvement that sets the default search results table to display oldest entries first.

Key Highlights

  • Fixed SQL injection vulnerability in POST /exec endpoint
  • Updated dependencies (hono, js-yaml, grpc) for security
  • UI fix: Default search results to oldest-first

New Features

  • Default search results table to oldest-first
  • Parameterized POST /exec to close SQL injection

Full Release Notes

## What's Changed
* fix(ui): default search results table to oldest-first by @adubovikov in https://github.com/sipcapture/homer/pull/1015
* fix(security): parameterize POST /exec to close SQL injection by @adubovikov in https://github.com/sipcapture/homer/pull/1014
* fix(security): bump hono 4.13.7 and js-yaml 4.3.2 by @adubovikov in https://github.com/sipcapture/homer/pull/1013
* chore(deps): bump @vitest/mocker by @dependabot in https://github.com/sipcapture/homer/pull/1012
* fix(security): bump google.golang.org/grpc to 1.83.2 by @adubovikov in https://github.com/sipcapture/homer/pull/1010

**Full Changelog**: https://github.com/sipcapture/homer/compare/11.0.341...11.0.342