4.2
Moyenne
CVE-2023-50710 Hono is a web framework written in TypeScript
Description
Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources. TrieRouter is used either explicitly or when the application matches a pattern that is not supported by the default RegExpRouter. Version 3.11.7 includes the change to fix this issue. As a workaround, avoid using TrieRouter directly.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| hono 3.11 | premières → < 3.11.7 | 3.11.7 |
Autres CVE de hono
Les 48 CVE de hono →
CVE-2026-111757
Hono is a Web application framework that provides support for any JavaScript runtime
5.3
Moyenne
CVE-2026-109955
Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated…
6.9
Moyenne
CVE-2026-93981
hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a…
2.3
Faible
CVE-2026-84365
Hono is a Web application framework that provides support for any JavaScript runtime
6.5
Moyenne