ROOT-APP-NPM-CVE-2026-54289 CVE-2026-54289 in hono - Patched by Root

Root has patched CVE-2026-54289 in the hono package for Root:npm. Multiple fixed versions available...

CVE-2026-54289 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, kibana, commercial-gitlab-rails-ee, langfuse-fips, librechat...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @agent-vm/agent-vm (>=0.0.138, <=0.0.148) +712 more potentially affected by CVE-2026-54289 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-54289 Source advisory: OSV:GHSA-WGPF-JWQJ-8H8P...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @agent-vm/agent-vm (>=0.0.138, <=0.0.148) +712 more potentially affected by CVE-2026-54289 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-54289 Source advisory: SNYK:JS-HONO-17356391...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @agent-vm/agent-vm (>=0.0.138, <=0.0.148) +712 more potentially affected by CVE-2026-54289 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-54289 Source advisory: GHSA-WGPF-JWQJ-8H8P...