PT-2026-69105

Name of the Vulnerable Software and Affected Versions Hono versions 3.8.0 through 4.12.33 Description The memo function from hono/jsx retains the result of a server-side render and reuses it for subsequent renders when props are equal. Because request-scoped values read inside the component are n...

Race Condition

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Race Condition through server-side rendering context handling in createContext and useContext. An attacker can read another in-flight request’s provided value by causing a...

CVE-2025-43855: Uncaught Exception

tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to cras...