ROOT-APP-NPM-CVE-2026-29085 CVE-2026-29085 in @rootio/hono - Patched by Root

🗓️ 09 Jun 2026 12:47:49Reported by GoogleType

osv

osv🔗 osv.dev👁 6 Views

Root patched CVE-2026-29085 in the Rootio hono package and released multiple fixed versions.

Reporter	Title	Published	Views	Family All 28
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to node modules Hono and Undici	30 Mar 202612:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	8 Jun 202607:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to path traversal (CVE-2026-29045) loss of integrity (CVE-2026-29085) and loss of confidentiality (CVE-2026-29086)	31 Mar 202615:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	19 May 202605:43	–	ibm
ATTACKERKB	CVE-2026-29085	4 Mar 202622:09	–	attackerkb
Chainguard	CVE-2026-29085 vulnerabilities	19 Mar 202601:17	–	cgr
Circl	CVE-2026-29085	5 Mar 202600:33	–	circl
CNNVD	Hono 注入漏洞	4 Mar 202600:00	–	cnnvd
CVE	CVE-2026-29085	4 Mar 202622:09	–	cve
Cvelist	CVE-2026-29085 Hono: SSE Control Field Injection via CR/LF in writeSSE()	4 Mar 202622:09	–	cvelist

09 Jun 2026 19:30Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5

EPSS0.0024

SSVC

rootio hono patched vulnerability 2026 multiple fixed versions