1 matches found
CVE-2026-71850 Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo from hono/jsx retains the result of a server side render and reuses it for later renders with comparator equal props, and request scoped values read inside the component take no part ...
4.8CVSS5.4AI score
SaveExploits0References3
20