Known Vulnerabilities for Hono by Honojs
Listed below are 10 of the newest known vulnerabilities associated with "Hono" by "Honojs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73565 json | @hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an ... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73423 json | Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs sec... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-71850 json | Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from hono... | Not Provided | 2026-08-07 | 2026-08-10 |
| CVE-2026-71849 json | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper... | Not Provided | 2026-08-07 | 2026-08-10 |
| CVE-2026-71848 json | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDet... | Not Provided | 2026-08-07 | 2026-08-08 |
| CVE-2026-69207 json | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS mid... | Not Provided | 2026-08-07 | 2026-08-10 |
| CVE-2026-59897 json | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API ... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59896 json | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx di... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59895 json | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.0.0 before 4.12.27, cx() in hono... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56764 json | Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-ti... | Not Provided | 2026-07-15 | 2026-07-15 |