{"action":"Upgrade hono to 4.9.7 or later.","affected":[{"fixed":"4.9.7","introduced":"0"}],"component":"hono","cve_ids":["CVE-2025-59139"],"ecosystem":"npm","epss":0.00446,"exploited":false,"fixed_versions":["4.9.7"],"ghsa_id":"GHSA-92vj-g62v-jqhh","id":"tcs_01M5KFEGF2XZ3FV7Z030NXFY65","modified_at":"2026-09-10T03:50:28.122949815Z","published_at":"2025-09-12T21:12:20Z","references":["https://osv.dev/vulnerability/GHSA-92vj-g62v-jqhh","https://github.com/honojs/hono/security/advisories/GHSA-92vj-g62v-jqhh","https://nvd.nist.gov/vuln/detail/CVE-2025-59139","https://github.com/honojs/hono/commit/605c70560b52f13af10379f79b76717042fafe8d","https://github.com/honojs/hono"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-92vj-g62v-jqhh","url":"https://osv.dev/vulnerability/GHSA-92vj-g62v-jqhh"}],"summary":"Hono has Body Limit Middleware Bypass"}