Hono
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 41 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 14, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Hono: Proxy Helper does not remove response headers listed in the `Connection` header
Hono - Prototype Pollution via __proto__ Key in parseBody with dot Option
Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility
hono/jsx does not isolate context per request, leading to cross-request data disclosure
Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication
Hono - Vary Header Injection in CORS Middleware
hono - HTML Injection via Improper JSX Attribute Name Handling in SSR
Hono: JWT middleware accepts any Authorization scheme, not only Bearer
Hono: IP Restriction bypasses static deny rules for non-canonical IPv6
Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection
Monitor Hono in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.