CVE-2025-71381
1 advisory.
npm/hono CVE-2025-71381: medium 4.2
Hono vulnerable to Vary Header Injection leading to potential CORS Bypass
Action: Upgrade hono to 4.10.3 or later.
npm i hono@4.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.3 | - |
Fixed versions
| 4.10.3 |
Sources
- osv: GHSA-q7jf-gf43-6x6p
- https://github.com/honojs/hono/security/advisories/GHSA-q7jf-gf43-6x6p
- https://nvd.nist.gov/vuln/detail/CVE-2025-71381
- https://github.com/honojs/hono/commit/d9b8b4b73b4f997994f2764013207365fe711282
- https://github.com/honojs/hono
- https://www.vulncheck.com/advisories/hono-vary-header-injection-in-cors-middleware
CVE-2025-71381 · published · modified · JSON