Products: 2
    Vulnerabilities: 59
    Known Exploited: 0
    0
    Critical Level Threats
    10
    High Level Threats
    46
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-118663

    @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

    Last Modified: Oct 29, 2026
    Published: Oct 28, 2026

    CVE-2026-111757

    Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

    Last Modified: Oct 20, 2026
    Published: Oct 19, 2026

    CVE-2026-109955

    Hono 4.12.4 before 4.13.11 Middleware Bypass via serveStatic Double Decoding

    Last Modified: Oct 13, 2026
    Published: Oct 13, 2026

    CVE-2026-93981

    hono/jsx before 4.13.7 Cross-Site Scripting via Unescaped Strings

    Last Modified: Sep 21, 2026
    Published: Sep 19, 2026

    CVE-2026-84365

    Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory

    Last Modified: Sep 04, 2026
    Published: Sep 01, 2026
    Items Per Page
    Hono Vulnerabilities & Security CVEs | CVE-DB