CVE-2026-27700 vulnerabilities

Vulnerabilities for packages: kibana...

@bgord/bun (1.10.16), @ottocode/database (>=0.1.303, <=0.1.320) +5 more potentially affected by CVE-2026-27700 via hono (>=4.12.0, <=4.12.1)

hono NPM version =4.12.0, =0.1.303, =0.1.303, =0.1.303, =0.1.303, =2.2.0, =0.2.11, =0.2.51 Source cves: CVE-2026-27700 Source advisory: OSV:GHSA-XH87-MX6M-69F3...

@bgord/bun (1.10.16), @ottocode/database (>=0.1.303, <=0.1.320) +5 more potentially affected by CVE-2026-27700 via hono (>=4.12.0, <=4.12.1)

hono NPM version =4.12.0, =0.1.303, =0.1.303, =0.1.303, =0.1.303, =2.2.0, =0.2.11, =0.2.51 Source cves: CVE-2026-27700 Source advisory: SNYK:JS-HONO-15353409...

CVE-2026-27700

creationtimestamp| type| source ---|---|--- 2026-02-25 17:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp5tojhfl2c 2026-02-25 18:06:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpbjdvysl2v 2026-03-02 18:00:16+00:00| seen|...

CVE-2026-27700 Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo

Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapter hono/aws-lambda behind an Application Load Balancer ALB, the getConnInfo function incorrectly selected the first value from the X-Forwarded-For...