{"api_version":"v1","generated_at":"2026-10-08T01:45:00+00:00","product":{"cve_count":46,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-honojs-hono-7bd0d2cd54b4","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/hono","name":"hono","next_cursor":null,"observations":[{"affected":"hono: < 4.13.7","affected_versions_present":true,"cve_id":"CVE-2026-93981","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93981","fixed":"hono: 4.13.7","last_modified":"2026-09-21T20:47:06.182Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-hxh3-vqpv-xpqv","primary_source":"","published":"2026-09-19T11:53:34.294Z"},{"affected":"< 4.13.5","affected_versions_present":true,"cve_id":"CVE-2026-84365","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84365","fixed":"4.13.5.","last_modified":"2026-09-04T02:09:11.744Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-gqvv-2mrq-wpjv","primary_source":"","published":"2026-09-01T20:26:51.031Z"},{"affected":"< 4.13.5","affected_versions_present":true,"cve_id":"CVE-2026-84364","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84364","fixed":"4.13.5.","last_modified":"2026-09-02T15:45:34.325Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-g6gw-c38x-mqfc","primary_source":"","published":"2026-09-01T20:24:55.966Z"},{"affected":"< 4.13.5","affected_versions_present":true,"cve_id":"CVE-2026-84363","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84363","fixed":"4.13.5.","last_modified":"2026-09-02T12:19:50.946Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-crvj-82cr-hjcx","primary_source":"","published":"2026-09-01T20:22:59.164Z"},{"affected":"< 4.12.34","affected_versions_present":true,"cve_id":"CVE-2026-69207","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-69207","fixed":"4.12.34.","last_modified":"2026-08-10T13:33:18.783Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-8j4g-w8fx-2239","primary_source":"","published":"2026-08-07T20:51:04.300Z"},{"affected":">= 3.8.0, < 4.12.34","affected_versions_present":true,"cve_id":"CVE-2026-71850","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71850","fixed":"4.12.34.","last_modified":"2026-08-10T13:26:55.984Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-f23p-vx2j-j53r","primary_source":"","published":"2026-08-07T18:41:17.068Z"},{"affected":">= 4.7.0, < 4.12.34","affected_versions_present":true,"cve_id":"CVE-2026-71849","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71849","fixed":"4.12.34.","last_modified":"2026-08-10T12:03:12.470Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-79qm-7rj5-m7r9","primary_source":"","published":"2026-08-07T18:38:16.287Z"},{"affected":">= 4.12.0, < 4.12.34","affected_versions_present":true,"cve_id":"CVE-2026-71848","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71848","fixed":"4.12.34.","last_modified":"2026-08-08T03:04:43.996Z","patch_url":"https://github.com/honojs/hono/security/advisories/GHSA-54fx-42gc-7vw4","primary_source":"","published":"2026-08-07T18:36:16.872Z"},{"affected":">= 4.0.0, < 4.12.27","affected_versions_present":true,"cve_id":"CVE-2026-59895","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59895","fixed":"4.12.27.","last_modified":"2026-07-08T19:41:04.292Z","patch_url":"https://github.com/honojs/hono/commit/cd3f6f7194f0e5c9d4b26ae0cf232018d0f388fc","primary_source":"","published":"2026-07-08T16:09:51.273Z"},{"affected":">= 4.11.8, < 4.12.27","affected_versions_present":true,"cve_id":"CVE-2026-59896","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59896","fixed":"4.12.27.","last_modified":"2026-07-08T16:59:09.169Z","patch_url":"https://github.com/honojs/hono/commit/fab3b13639339cbd5ba1166a5b23d9ac30c5f64f","primary_source":"","published":"2026-07-08T16:08:07.975Z"},{"affected":">= 4.3.3, < 4.12.27","affected_versions_present":true,"cve_id":"CVE-2026-59897","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59897","fixed":"4.12.27.","last_modified":"2026-07-09T13:51:31.335Z","patch_url":"https://github.com/honojs/hono/commit/aa921770d09bc35970362d5a2630a878f6d982fd","primary_source":"","published":"2026-07-08T16:06:11.369Z"},{"affected":"< 4.12.25","affected_versions_present":true,"cve_id":"CVE-2026-54288","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54288","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T16:11:23.131Z","patch_url":"","primary_source":"","published":"2026-06-22T17:18:24.532Z"},{"affected":"< 4.12.25","affected_versions_present":true,"cve_id":"CVE-2026-54289","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54289","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-22T18:19:34.502Z","patch_url":"","primary_source":"","published":"2026-06-22T17:16:58.553Z"},{"affected":"< 4.12.25","affected_versions_present":true,"cve_id":"CVE-2026-54290","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54290","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-22T17:26:12.791Z","patch_url":"","primary_source":"","published":"2026-06-22T17:15:35.689Z"},{"affected":"< 4.12.25","affected_versions_present":true,"cve_id":"CVE-2026-54286","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54286","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T14:07:34.188Z","patch_url":"","primary_source":"","published":"2026-06-22T17:14:40.133Z"},{"affected":"< 4.12.25","affected_versions_present":true,"cve_id":"CVE-2026-54287","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54287","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-22T17:36:59.514Z","patch_url":"","primary_source":"","published":"2026-06-22T17:13:14.947Z"},{"affected":"< 4.12.21","affected_versions_present":true,"cve_id":"CVE-2026-47673","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47673","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-30T01:59:15.167Z","patch_url":"","primary_source":"","published":"2026-05-28T15:29:44.160Z"},{"affected":"< 4.12.21","affected_versions_present":true,"cve_id":"CVE-2026-47674","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47674","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-02T18:15:02.284Z","patch_url":"","primary_source":"","published":"2026-05-28T15:29:08.525Z"},{"affected":"< 4.12.21","affected_versions_present":true,"cve_id":"CVE-2026-47675","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47675","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-28T19:17:17.728Z","patch_url":"","primary_source":"","published":"2026-05-28T15:28:23.458Z"},{"affected":"< 4.12.21","affected_versions_present":true,"cve_id":"CVE-2026-47676","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47676","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-28T19:13:28.934Z","patch_url":"","primary_source":"","published":"2026-05-28T15:26:01.672Z"},{"affected":"< 4.12.18","affected_versions_present":true,"cve_id":"CVE-2026-44459","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44459","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T15:52:56.009Z","patch_url":"","primary_source":"","published":"2026-05-13T15:02:23.872Z"},{"affected":"< 4.12.18","affected_versions_present":true,"cve_id":"CVE-2026-44458","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44458","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T16:00:11.507Z","patch_url":"","primary_source":"","published":"2026-05-13T15:01:37.198Z"},{"affected":"< 4.12.18","affected_versions_present":true,"cve_id":"CVE-2026-44457","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44457","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-18T14:07:53.005Z","patch_url":"","primary_source":"","published":"2026-05-13T14:58:52.931Z"},{"affected":"< 4.12.16","affected_versions_present":true,"cve_id":"CVE-2026-44456","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44456","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-13T15:31:19.896Z","patch_url":"","primary_source":"","published":"2026-05-13T14:58:08.451Z"},{"affected":"< 4.12.16","affected_versions_present":true,"cve_id":"CVE-2026-44455","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44455","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T13:46:11.630Z","patch_url":"","primary_source":"","published":"2026-05-13T14:57:05.865Z"},{"affected":"< 4.12.12","affected_versions_present":true,"cve_id":"CVE-2026-39410","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39410","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T15:17:14.892Z","patch_url":"","primary_source":"","published":"2026-04-08T14:44:40.797Z"},{"affected":"< 4.12.12","affected_versions_present":true,"cve_id":"CVE-2026-39409","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39409","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:13:05.175Z","patch_url":"https://github.com/honojs/hono/commit/48fa2233bc092f650119f42df043050737cabf39","primary_source":"","published":"2026-04-08T14:43:36.476Z"},{"affected":"< 4.12.12","affected_versions_present":true,"cve_id":"CVE-2026-39408","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39408","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-10T20:31:47.508Z","patch_url":"https://github.com/honojs/hono/commit/b470278920fffcfd6d76002755d6db53db827679","primary_source":"","published":"2026-04-08T14:42:25.357Z"},{"affected":"< 4.12.12","affected_versions_present":true,"cve_id":"CVE-2026-39407","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39407","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:04:59.862Z","patch_url":"https://github.com/honojs/hono/commit/9aff14bd727f8b0435c963363fd803260e7b8e3c","primary_source":"","published":"2026-04-08T14:41:20.301Z"},{"affected":"< 4.12.4","affected_versions_present":true,"cve_id":"CVE-2026-29085","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29085","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-05T15:41:57.607Z","patch_url":"https://github.com/honojs/hono/commit/f4123ed9ea3c7c52380cc99a079a4d773838846e","primary_source":"","published":"2026-03-04T22:09:45.580Z"},{"affected":"< 4.12.4","affected_versions_present":true,"cve_id":"CVE-2026-29045","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29045","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-05T15:42:05.041Z","patch_url":"https://github.com/honojs/hono/commit/6a0607a929d888893f0c91d92dce2fcfdb3662a3","primary_source":"","published":"2026-03-04T22:09:22.045Z"},{"affected":"< 4.12.4","affected_versions_present":true,"cve_id":"CVE-2026-29086","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29086","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-05T15:42:10.524Z","patch_url":"https://github.com/honojs/hono/commit/44ae0c8cc4d5ab2bed529127a4ac72e1483ad073","primary_source":"","published":"2026-03-04T22:09:01.488Z"},{"affected":">= 4.12.0, < 4.12.2","affected_versions_present":true,"cve_id":"CVE-2026-27700","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27700","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-27T17:01:28.403Z","patch_url":"https://github.com/honojs/hono/commit/41adbf56e252c04611f8972364ac0887ae07a4c7","primary_source":"","published":"2026-02-25T15:01:44.681Z"},{"affected":"< 4.11.7","affected_versions_present":true,"cve_id":"CVE-2026-24771","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24771","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-27T20:51:54.145Z","patch_url":"https://github.com/honojs/hono/commit/2cf60046d730df9fd0aba85178f3ecfe8212d990","primary_source":"","published":"2026-01-27T19:41:33.773Z"},{"affected":"< 4.11.7","affected_versions_present":true,"cve_id":"CVE-2026-24473","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24473","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-27T20:51:59.157Z","patch_url":"https://github.com/honojs/hono/commit/cf9a78db4d0a19b117aee399cbe9d3a6d9bfd817","primary_source":"","published":"2026-01-27T19:37:52.012Z"},{"affected":"< 4.11.7","affected_versions_present":true,"cve_id":"CVE-2026-24472","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24472","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-27T20:52:05.494Z","patch_url":"https://github.com/honojs/hono/commit/12c511745b3f1e7a3f863a23ce5f921c7fa805d1","primary_source":"","published":"2026-01-27T19:34:33.065Z"},{"affected":"< 4.11.7","affected_versions_present":true,"cve_id":"CVE-2026-24398","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24398","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-27T19:20:35.594Z","patch_url":"https://github.com/honojs/hono/commit/edbf6eea8e6c26a3937518d4ed91d8666edeec37","primary_source":"","published":"2026-01-27T19:06:42.792Z"},{"affected":"< 4.11.4","affected_versions_present":true,"cve_id":"CVE-2026-22817","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22817","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-14T19:12:35.457Z","patch_url":"https://github.com/honojs/hono/commit/cc0aa7ae327ed84cc391d29086dec2a3e44e7a1f","primary_source":"","published":"2026-01-13T19:49:55.316Z"},{"affected":"< 4.11.4","affected_versions_present":true,"cve_id":"CVE-2026-22818","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22818","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-15T15:29:39.849Z","patch_url":"https://github.com/honojs/hono/commit/190f6e28e2ca85ce3d1f2f54db1310f5f3eab134","primary_source":"","published":"2026-01-13T19:49:52.042Z"},{"affected":">= 1.1.0, < 4.10.2","affected_versions_present":true,"cve_id":"CVE-2025-62610","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62610","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-23T17:31:49.209Z","patch_url":"https://github.com/honojs/hono/commit/45ba3bf9e3dff8e4bd85d6b47d4b71c8d6c66bef","primary_source":"","published":"2025-10-22T19:24:08.138Z"},{"affected":"< 4.9.7","affected_versions_present":true,"cve_id":"CVE-2025-59139","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59139","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-09-12T13:45:58.215Z","patch_url":"https://github.com/honojs/hono/commit/605c70560b52f13af10379f79b76717042fafe8d","primary_source":"","published":"2025-09-12T13:03:05.777Z"},{"affected":">= 4.8.0, < 4.9.6","affected_versions_present":true,"cve_id":"CVE-2025-58362","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-58362","fixed":"4.9.6.","last_modified":"2025-09-05T16:05:20.545Z","patch_url":"https://github.com/honojs/hono/commit/1d79aedc3f82d8c9969b115fe61bc4bd705ec8de","primary_source":"","published":"2025-09-04T23:56:13.983Z"},{"affected":"< 4.6.5","affected_versions_present":true,"cve_id":"CVE-2024-48913","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-48913","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-07T18:33:39.270Z","patch_url":"https://github.com/honojs/hono/commit/aa50e0ab77b5af8c53c50fe3b271892f8eeeea82","primary_source":"","published":"2024-10-15T15:56:14.408Z"},{"affected":"< 4.5.8","affected_versions_present":true,"cve_id":"CVE-2024-43787","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-43787","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-22T15:40:32.051Z","patch_url":"https://github.com/honojs/hono/commit/41ce840379516410dee60c783142e05bb5a22449","primary_source":"","published":"2024-08-22T14:23:44.025Z"},{"affected":"< 4.2.7","affected_versions_present":true,"cve_id":"CVE-2024-32869","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32869","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T02:20:35.658Z","patch_url":"https://github.com/honojs/hono/commit/92e65fbb6e5e7372650e7690dbd84938432d9e65","primary_source":"","published":"2024-04-23T20:20:44.908Z"},{"affected":"< 3.11.7","affected_versions_present":true,"cve_id":"CVE-2023-50710","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-50710","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T22:16:47.211Z","patch_url":"https://github.com/honojs/hono/commit/8e2b6b08518998783f66d31db4f21b1b1eecc4c8","primary_source":"","published":"2023-12-14T17:22:26.836Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"honojs"}}