CyberRota Analysis
AI-GeneratedThe Hono web application framework for JavaScript runtimes is vulnerable due to improper isolation of context values during server-side rendering, potentially allowing data from one request to leak into another. This could lead to unauthorized access to sensitive information across different user sessions. Developers and organizations using Hono versions 4.11.8 through 4.12.26 should prioritize upgrading to version 4.12.27 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context values per request during server-side rendering, allowing createContext, useContext, jsxRenderer, or useRequestContext data from a different in-flight request to be used after an await in an async component. This issue is fixed in version 4.12.27.
Related CVEs
Other vulnerabilities affecting the same vendor(s)