Browse CVEs

MEDIUM 6.5 CVE-2026-59896 Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context va… Hono 4.12.27+ Fix from $1,6002026-07-08 MEDIUM 6.1 CVE-2026-59895 Hono is a Web application framework that provides support for any JavaScript runtime. From 4.0.0 before 4.12.27, cx() in hono/css composes class name… Hono 4.12.27+ Fix from $1,6002026-07-08 MEDIUM 5.3 CVE-2026-59897 Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can d… Hono 4.12.27+ Fix from $1,6002026-07-08 MEDIUM 6.5 CVE-2026-47673 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify tha… Hono 4.12.21+ Fix from $1,6002026-05-28 MEDIUM 5.3 CVE-2026-47674 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware (hono/ip-restri… Hono 4.12.21+ Fix from $1,6002026-05-28 MEDIUM 5.3 CVE-2026-47675 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() function in hono/cookie valid… Hono 4.12.21+ Fix from $1,6002026-05-28 MEDIUM 5.3 CVE-2026-47676 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() strips the mount prefix from the … Hono 4.12.21+ Fix from $1,6002026-05-28 MEDIUM 6.5 CVE-2026-44456 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, bodyLimit() does not reliably enforce maxSize… Hono 4.12.16+ Fix from $1,6002026-05-13 MEDIUM 6.1 CVE-2026-44455 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handling of JSX element tag names in… Hono 4.12.16+ Fix from $1,6002026-05-13 MEDIUM 5.3 CVE-2026-44457 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, Cache Middleware does not skip caching for re… Hono 4.12.18+ Fix from $1,6002026-05-13 HIGH 7.5 CVE-2026-39408 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path traversal issue in toSSG() allows file… Hono after 4.12.11 Fix from $1,9502026-04-08 MEDIUM 5.3 CVE-2026-39406 @hono/node-server allows running the Hono application on Node.js. Prior to 1.19.13, a path handling inconsistency in serveStatic allows protected sta… Node Server after 1.19.12 Fix from $1,6002026-04-08 MEDIUM 5.3 CVE-2026-39407 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path handling inconsistency in serveStatic … Hono after 4.12.11 Fix from $1,6002026-04-08 MEDIUM 5.3 CVE-2026-39409 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, ipRestriction() does not canonicalize IPv4-ma… Hono after 4.12.11 Fix from $1,6002026-04-08 HIGH 7.5 CVE-2026-29087 @hono/node-server allows running the Hono application on Node.js. Prior to version 1.19.10, when using @hono/node-server's static file serving togeth… Node Server 1.19.10+ Fix from $1,9502026-03-06 CRITICAL 9.8 CVE-2026-29045 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using serveStatic together with r… Hono 4.12.4+ Fix from $2,3002026-03-04 MEDIUM 6.5 CVE-2026-29085 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using streamSSE() in Streaming He… Hono 4.12.4+ Fix from $1,6002026-03-04 MEDIUM 5.4 CVE-2026-29086 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie() utility did not valida… Hono 4.12.4+ Fix from $1,6002026-03-04 HIGH 7.5 CVE-2026-27700 Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapte… Hono 4.12.2+ Fix from $1,9502026-02-25 MEDIUM 5.3 CVE-2026-24473 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve static Middleware for the Cloudf… Hono 4.11.7+ Fix from $1,6002026-01-27 MEDIUM 5.3 CVE-2026-24472 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Cache Middleware contains an informati… Hono 4.11.7+ Fix from $1,6002026-01-27 MEDIUM 6.5 CVE-2026-24398 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, IP Restriction Middleware in Hono is v… Hono 4.11.7+ Fix from $1,6002026-01-27 MEDIUM 6.5 CVE-2026-22817 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw in Hono’s JWK/JWKS JWT verific… Hono 4.11.4+ Fix from $1,6002026-01-13 MEDIUM 6.5 CVE-2026-22818 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw in Hono’s JWK/JWKS JWT verific… Hono 4.11.4+ Fix from $1,6002026-01-13 HIGH 8.1 CVE-2025-62610 Hono is a Web application framework that provides support for any JavaScript runtime. In versions from 1.1.0 to before 4.10.2, Hono’s JWT Auth Middle… Hono 4.10.2+ Fix from $1,9502025-10-22 MEDIUM 5.3 CVE-2025-59139 Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw in the `bodyLimit` middlewar… Hono 4.9.7+ Fix from $1,6002025-09-12 HIGH 7.5 CVE-2025-58362 Hono is a Web application framework that provides support for any JavaScript runtime. Versions 4.8.0 through 4.9.5 contain a flaw in the getPath util… Hono 4.9.6+ Fix from $1,9502025-09-05 MEDIUM 5.9 CVE-2024-48913 Hono, a web framework, prior to version 4.6.5 is vulnerable to bypass of cross-site request forgery (CSRF) middleware by a request without Content-Ty… Hono 4.6.5+ Fix from $1,6002024-10-15 MEDIUM 5.0 CVE-2024-43787 Hono is a Web application framework that provides support for any JavaScript runtime. Hono CSRF middleware can be bypassed using crafted Content-Type… Hono 4.5.8+ Fix from $1,6002024-08-22 MEDIUM 5.3 CVE-2024-32869 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with deno, it is… Hono 4.2.7+ Fix from $1,6002024-04-23