15 matches found
CVE-2025-71381
A flaw was found in Hono's Cross-Origin Resource Sharing CORS middleware. When the origin is not set to a wildcard, the middleware improperly copies the Vary header from incoming requests into the response. This allows an attacker to inject arbitrary Vary values, potentially leading to cache key...
ROOT-APP-NPM-CVE-2026-39407 CVE-2026-39407 in hono - Patched by Root
Root has patched CVE-2026-39407 in the hono package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-39408 CVE-2026-39408 in hono - Patched by Root
Root has patched CVE-2026-39408 in the hono package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54290 CVE-2026-54290 in @rootio/hono - Patched by Root
Root has patched CVE-2026-54290 in the @rootio/hono package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-39409 CVE-2026-39409 in hono - Patched by Root
Root has patched CVE-2026-39409 in the hono package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-39410 CVE-2026-39410 in hono - Patched by Root
Root has patched CVE-2026-39410 in the hono package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-26PP-8WGV-HJVM GHSA-26pp-8wgv-hjvm in hono - Patched by Root
Root has patched GHSA-26pp-8wgv-hjvm in the hono package for Root:npm. Multiple fixed versions available...
MAL-2026-5950 Malicious code in @mastra/hono (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c7b04ac71f0c234ec7105176bed53c8b893cdd89fd72465733787456601d0c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @mastra/hono (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c7b04ac71f0c234ec7105176bed53c8b893cdd89fd72465733787456601d0c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
ROOT-APP-NPM-CVE-2026-29045 CVE-2026-29045 in @rootio/hono - Patched by Root
Root has patched CVE-2026-29045 in the @rootio/hono package for Root:npm. Multiple fixed versions available...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
CVE-2026-39852 vulnerabilities
Vulnerabilities for packages: apicurio-registry, hono, apicurio-registry-fips, keycloak-fips, keycloak, request-9047-keycloak-fips...
GHSA-RC95-PCM8-65V9 vulnerabilities
Vulnerabilities for packages: apicurio-registry, hono, apicurio-registry-fips, keycloak-fips, keycloak, request-9047-keycloak-fips...