Hono

Products

Exploited and recent CVEs

• CVE-2026-56764 Low 3.7 Hono - Timing Attack in basicAuth and bearerAuth Middleware 0.3%
• CVE-2026-56763 Medium 4.8 Hono - Prototype Pollution via __proto__ Key in parseBody with dot Option 0.3%
• CVE-2025-71381 Medium 6.5 Hono - Vary Header Injection in CORS Middleware 0.3%
• CVE-2026-56761 Medium 4.3 hono - HTML Injection via Improper JSX Attribute Name Handling in SSR 0.3%
• CVE-2026-56762 Medium 5.3 Hono - Missing Cookie Name Validation in setCookie() 0.4%