CVE-2026-39406

The CVE concerns @hono/node-server where a path handling inconsistency in serveStatic allows bypassing route-based middleware via repeated slashes (//) in the request path. Before version 1.19.13, the router may not match paths containing repeated slashes (e.g., /admin/*) while serveStatic resolv...

org.eclipse.hono:hono-adapter-http-vertx-base (0.5-m5), org.eclipse.hono:hono-adapter-mqtt-vertx (0.5-m5) +5 more potentially affected by CVE-2020-27217 via org.eclipse.hono:hono-core (0.5-m5)

org.eclipse.hono:hono-core MAVEN version 0.5-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.hono:hono-core and may be impacted: - org.eclipse.hono:hono-adapter-http-vertx-base 0.5-m5 - org.eclipse.hono:hono-adapter-mqtt-vertx 0.5-m5 -...

org.eclipse.hono:hono-adapter-mqtt-vertx (0.5-m2), org.eclipse.hono:hono-adapter-rest-vertx (0.5-m2) +4 more potentially affected by CVE-2020-27217 via org.eclipse.hono:hono-core (0.5-m2)

org.eclipse.hono:hono-core MAVEN version 0.5-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.hono:hono-core and may be impacted: - org.eclipse.hono:hono-adapter-mqtt-vertx 0.5-m2 - org.eclipse.hono:hono-adapter-rest-vertx 0.5-m2 -...

org.eclipse.hono:hono-adapter-mqtt-vertx (0.5-m4), org.eclipse.hono:hono-adapter-rest-vertx (0.5-m4) +4 more potentially affected by CVE-2020-27217 via org.eclipse.hono:hono-core (0.5-m4)

org.eclipse.hono:hono-core MAVEN version 0.5-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.hono:hono-core and may be impacted: - org.eclipse.hono:hono-adapter-mqtt-vertx 0.5-m4 - org.eclipse.hono:hono-adapter-rest-vertx 0.5-m4 -...