Packages / hono / Security

ModerateVulnerabilityGHSA-xgm2-5f3f-mvvcPublished 21 Jul 2026

Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

Affected releases · hono

  • 4.x4.3.3 – 4.12.26Fixed in 4.12.27

On 4.x, the newest line:

npm install hono@4.12.27

  1. Not affected

    0.0.1 – 4.3.2

    247 releases

  2. Affected

    4.3.3 – 4.12.26

    141 releases

  3. Fixed

    4.12.27 – 4.13.13

    22 releases, latest

410 stable releases of hono, oldest to newest.

Is your project affected?

Paste your package.json, or type the range you declare for hono. It is read in your browser and sent nowhere.

What happens

The full text is not stored yet. Read it on osv.dev.