Aller au contenu
Se connecter
5.0 Moyenne

CVE-2024-43787 Hono is a Web application framework that provides support for any JavaScript runtime

Description

Hono is a Web application framework that provides support for any JavaScript runtime. Hono CSRF middleware can be bypassed using crafted Content-Type header. MIME types are case insensitive, but isRequestedByFormElementRe only matches lower-case. As a result, attacker can bypass csrf middleware using upper-case form-like MIME type. This vulnerability is fixed in 4.5.8.

Produits et versions touchés

Produit Versions touchées Corrigé en
hono 4.5 premières → < 4.5.8 4.5.8
hono 4.5 premières → < 4.5.8 4.5.8

Autres CVE de hono

Les 48 CVE de hono →
CVE-2026-111757 Hono is a Web application framework that provides support for any JavaScript runtime 5.3 Moyenne CVE-2026-109955 Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated… 6.9 Moyenne CVE-2026-93981 hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a… 2.3 Faible CVE-2026-84365 Hono is a Web application framework that provides support for any JavaScript runtime 6.5 Moyenne
Suivre cette CVE