@voltagent/server-hono (>=1.0.0-next.1, <=1.2.11), @voltagent/serverless-hono (>=1.0.1, <=1.0.10) potentially affected by CVE-2026-13511 via @voltagent/server-core (>=1.0.0-next.1, <=1.0.36)

@voltagent/server-core NPM version =1.0.0-next.1, =1.0.0-next.1, =1.0.1, =1.0.10 Source cves: CVE-2026-13511 Source advisory: SNYK:JS-VOLTAGENTSERVERCORE-17875090...

Improper Authorization

Overview @voltagent/serverless-hono is a Serverless fetch-based runtime provider for VoltAgent using Hono Affected versions of this package are vulnerable to Improper Authorization via the handleGetMemoryConversation function. An attacker can gain unauthorized access to memory conversation data b...