An open index of dependabot pull requests across open source projects.

hono

Ecosystem:
npm
Package URL:
pkg:npm/hono
Total PRs:
15,215 Dependabot PRs
Latest PR:
about 5 hours ago
Unique Repositories:
5,316 repositories
Unique Repos (30 days):
770 repositories
Security Advisories
Hono vulnerable to XSS through ErrorBoundary component
GHSA-9r54-q6cx-xmh5 CVE-2026-24771 MODERATE published 4 months ago • updated about 1 month ago
## Summary A Cross-Site Scripting (XSS) vulnerability exists in the `ErrorBoundary` component of the hono/jsx library. Under certain usage pattern...
Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)
GHSA-w332-q679-j88p CVE-2026-24473 MODERATE published 4 months ago • updated about 1 month ago
## Summary Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulnerability that may allow attackers to...
Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception
GHSA-6wqw-2p9w-4vw4 CVE-2026-24472 MODERATE published 4 months ago • updated about 1 month ago
## Summary Cache Middleware contains an information disclosure vulnerability caused by improper handling of HTTP cache control directives. The mid...
Hono IPv4 address validation bypass in IP Restriction Middleware allows IP spoofing
GHSA-r354-f388-2fhh CVE-2026-24398 MODERATE published 4 months ago • updated about 1 month ago
## Summary IP Restriction Middleware in Hono is vulnerable to an IP address validation bypass. The `IPV4_REGEX` pattern and `convertIPv4ToBinary` ...
Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie()
GHSA-5pq2-9x2x-5p6w CVE-2026-29086 MODERATE published 2 months ago • updated 7 days ago
## Summary The `setCookie()` utility did not validate semicolons (`;`), carriage returns (`\r`), or newline characters (`\n`) in the `domain` and ...
Recent PRs
build(deps): bump hono from 4.12.16 to 4.12.19

ytkg/ytkg.jp #279

4.12.16 → 4.12.19 Patch PR
Open about 15 hours ago 1 comment
ytkg
Package Details
Name: hono
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/hono
JSON API: View JSON
Security Advisories

31

Active advisories
HIGH 6
MODERATE 22
LOW 3
View All npm Advisories
Package Information
Description:

Web framework built on Web Standards

Repository: https://github.com/honojs/hono
Homepage: https://hono.dev
Latest Release: 4.7.11
12 months ago
Dependent Repos: 668
Dependent Packages: 210
Downloads: 3,984,183
Ranking: Top 0.6913% by dependent repos Top 0.5184% by downloads Top 0.2201% by dependent pkgs
PR Status
Open 6,977 (45.9%)
Merged 811 (5.3%)
Closed 6,961 (45.8%)
PR Types
Major 283 (1.9%)
Patch 6,613 (43.5%)
Minor 7,853 (51.7%)