CVE-2026-71849
1 advisory.
npm/hono CVE-2026-71849: low 3.7
Hono: Proxy Helper does not remove response headers listed in the `Connection` header
Action: Upgrade hono to 4.12.34 or later.
npm i hono@4.12.34Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.7.0 | 4.12.34 | - |
Fixed versions
| 4.12.34 |
Sources
- osv: GHSA-79qm-7rj5-m7r9
- https://github.com/honojs/hono/security/advisories/GHSA-79qm-7rj5-m7r9
- https://github.com/honojs/hono/commit/720b566290793d4358bf39843adcb7cf4da4548f
- https://github.com/honojs/hono
- https://github.com/honojs/hono/releases/tag/v4.12.34
CVE-2026-71849 · published · modified · JSON