Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/13 3:2 p.m.11 views

CVE-2026-44459 Hono: Improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-spec-compliant claim values to silently bypass time-based checks. This issue is not...

3.8CVSS6AI score0.00216EPSS
SaveExploits0References3
Rows per page
Query Builder