CVE-2026-126343

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.1.6, the WebSocket upgrade handler waits for the Hono application to finish asynchronous middleware or handler work without first attaching an error listener to the socket. If an unauthenticated client resets the...

CVE-2026-126343: honojs node-server: @hono/node-server allows running the Hono application on Node.js

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.1.6, the WebSocket upgrade handler waits for the Hono application to finish asynchronous middleware or handler work without first attaching an error listener to the socket. If an unauthenticated client resets the...

PT-2026-146063

Name of the Vulnerable Software and Affected Versions @hono/node-server versions 2.0.0 through 2.1.5 Description The WebSocket upgrade handler fails to attach an error listener to the socket before waiting for the Hono application to complete asynchronous middleware or handler tasks. An...

Origin Validation Error

Overview org.webjars.npm:webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Origin Validation Error via the WebSocket upgrade handler in lib/Server.js when a...