Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/04 6:1 p.m.22 views

Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths

Summary app.mount strips the mount prefix from the incoming request path using the raw URL pathname, while route matching is performed against the percent-decoded path. This inconsistency causes the prefix to be stripped at the wrong position when the path contains percent-encoded multi-byte...

5.3CVSS5.8AI score0.0026EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder