CVE-2026-29086

creationtimestamp| type| source ---|---|--- 2026-03-05 00:03:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbiq7ydx32d...

CVE-2026-29086

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie utility did not validate semicolons ;, carriage returns \r, or newline characters \n in the domain and path options when constructing the Set-Cookie header. Because cookie...