Hono vulnerabilities
Every vulnerability this feed holds for Hono, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
2 vulnerabilities tracked.
- 6.9 Hono before 4.10.3 contains a flaw in its CORS middleware: when the origin is not set to "", the middleware copies the Vary header from the…
- 6.3 Hono before 4.12.7 allows proto key in parseBody with dot option enabled, permitting specially crafted form field names to create objects…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Hono is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Linux Red Hat IBM Google n/a Apple Apache Software Foundation Oracle Corporation zephyrproject Unknown FFMPEG Fortinet Adobe Drupal SAP_SE Cisco Eclipse Foundation OpenEMR erlang go-vikunja hickory-dns n8n-io Hitachi