25 matches found
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
Summary memo from hono/jsx retains the result of a server-side render and reuses it for later renders with comparator-equal props. Request-scoped values read inside the component take no part in that comparison, so a response can contain HTML rendered for another user's request. Details Component...
4.8CVSS5.3AI score0.00164EPSS
SaveExploits0References4Affected Software1
20