Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/01/27 7:01 p.m.•4 views

Incorrect Regular Expression

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Incorrect Regular Expression in the form of the IPV4REGEX pattern not properly matching IPv4 octet ranges, and passing values above 255 on to convertIPv4ToBinary. An...

6.5CVSS5.7AI score0.0035EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•3 views

CVE-2026-24398: Incorrect Regular Expression

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, IP Restriction Middleware in Hono is vulnerable to an IP address validation bypass. The IPV4REGEX pattern and convertIPv4ToBinary function in src/utils/ipaddr.ts do not properly validate...

6.5CVSS5.8AI score0.0035EPSS
SaveExploits0References1
Rows per page
Query Builder