Skip to content
Sign in
5.3 Medium

CVE-2024-32869 Hono is a Web application framework that provides support for any JavaScript runtime

Description

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with deno, it is possible to traverse the directory where `main.ts` is located. This can result in retrieval of unexpected files. Version 4.2.7 contains a patch for the issue.

Affected products and versions

Product Affected versions Fixed in
hono 4.2 earliest → < 4.2.7 4.2.7
Hono Versions not published

Other CVEs of hono

The 48 CVEs of hono →
CVE-2026-111757 Hono is a Web application framework that provides support for any JavaScript runtime 5.3 Medium CVE-2026-109955 Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated… 6.9 Medium CVE-2026-93981 hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a… 2.3 Low CVE-2026-84365 Hono is a Web application framework that provides support for any JavaScript runtime 6.5 Medium
Track this CVE