High
CVE-2026-22817
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 112
Reset filters
Medium
CVE-2025-71381
Hono vulnerable to Vary Header Injection leading to potential CORS Bypass
High
CVE-2025-62610
Hono Improper Authorization vulnerability
Critical
CVE-2025-59159
SillyTavern Web Interface Vulnerable DNS Rebinding
Medium
CVE-2025-59139
Hono has Body Limit Middleware Bypass
High
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
High
CVE-2025-58362
Hono's flaw in URL path parsing could cause path confusion
High
ghsa-3j63-5h8p-gf7c
x402 SDK vulnerable in outdated versions in resource servers for builders
Medium
CVE-2024-48913
Hono allows bypass of CSRF Middleware by a request without Content-Type header.
Low
CVE-2024-43787
Hono CSRF middleware can be bypassed using crafted Content-Type header
Medium
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Medium
CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
High
CVE-2024-32652
@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed
Medium
CVE-2024-23340
@hono/node-server cannot handle "double dots" in URL
Medium
CVE-2023-50710
Named path parameters can be overridden in TrieRouter
Low
CVE-2020-15168
The `size` option isn't honored after following a redirect in node-fetch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.