CVE-2025-58362
1 advisory.
npm/hono CVE-2025-58362: high 7.5, EPSS 0.55%
Hono's flaw in URL path parsing could cause path confusion
Action: Upgrade hono to 4.9.6 or later.
npm i hono@4.9.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.8.0 | 4.9.6 | - |
Fixed versions
| 4.9.6 |
Sources
- osv: GHSA-9hp6-4448-45g2
- https://github.com/honojs/hono/security/advisories/GHSA-9hp6-4448-45g2
- https://nvd.nist.gov/vuln/detail/CVE-2025-58362
- https://github.com/honojs/hono/commit/1d79aedc3f82d8c9969b115fe61bc4bd705ec8de
- https://github.com/honojs/hono
- https://github.com/honojs/hono/releases/tag/v4.9.6
CVE-2025-58362 · published · modified · JSON