Lucene search
+L

10 matches found

Cvelist
Cvelist
added 2026/06/23 12:13 p.m.44 views

CVE-2026-56762 Hono - Missing Cookie Name Validation in setCookie()

Hono before 4.12.12 does not validate cookie names on the write path in the setCookie, serialize, and serializeSigned functions, allowing invalid characters such as control characters e.g. \r or \n when an application passes a user-controlled cookie name. This can produce malformed Set-Cookie...

6.9CVSS0.00247EPSS
SaveExploits0References2
Rows per page
Query Builder