Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/23 12:13 p.m.5 views

CVE-2026-56762 Hono - Missing Cookie Name Validation in setCookie()

Hono before 4.12.12 does not validate cookie names on the write path in the setCookie, serialize, and serializeSigned functions, allowing invalid characters such as control characters e.g. \r or \n when an application passes a user-controlled cookie name. This can produce malformed Set-Cookie...

6.9CVSS6AI score0.00247EPSS
SaveExploits0References4
Rows per page
Query Builder