Packages / hono / Security

ModerateVulnerabilityGHSA-f6gv-hh8j-q8vqPublished 15 Dec 2023

Named path parameters can be overridden in TrieRouter

Affected releases · hono

  • 3.x3.0.0 – 3.11.6Fixed in 3.11.7
  • 2.x and older0.0.1 – 2.7.8No fix, no longer updated

On 3.x, the newest line:

npm install hono@3.11.7
4.x

  1. Not affected

    4.0.0 – 4.13.13

    195 releases, latest

3.x

  1. Affected

    3.0.0 – 3.11.6

    73 releases

  2. Fixed

    3.11.7 – 3.12.12

    19 releases

2.x

  1. Affected

    2.0.0 – 2.7.8

    49 releases

1.x

  1. Affected

    1.0.0 – 1.6.4

    29 releases

0.x

  1. Affected

    0.0.1 – 0.5.10

    45 releases

410 stable releases of hono, oldest to newest, one row per major.

Is your project affected?

Paste your package.json, or type the range you declare for hono. It is read in your browser and sent nowhere.

What happens

The full text is not stored yet. Read it on osv.dev.