{"action":"Upgrade hono to 4.9.6 or later.","affected":[{"fixed":"4.9.6","introduced":"4.8.0"}],"component":"hono","cve_ids":["CVE-2025-58362"],"ecosystem":"npm","epss":0.00553,"exploited":false,"fixed_versions":["4.9.6"],"ghsa_id":"GHSA-9hp6-4448-45g2","id":"tcs_01M5KFG081RV4FZXSGV5NRXJ75","modified_at":"2025-09-05T16:11:28Z","published_at":"2025-09-03T21:30:13Z","references":["https://osv.dev/vulnerability/GHSA-9hp6-4448-45g2","https://github.com/honojs/hono/security/advisories/GHSA-9hp6-4448-45g2","https://nvd.nist.gov/vuln/detail/CVE-2025-58362","https://github.com/honojs/hono/commit/1d79aedc3f82d8c9969b115fe61bc4bd705ec8de","https://github.com/honojs/hono","https://github.com/honojs/hono/releases/tag/v4.9.6"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9hp6-4448-45g2","url":"https://osv.dev/vulnerability/GHSA-9hp6-4448-45g2"}],"summary":"Hono's flaw in URL path parsing could cause path confusion"}