CVE WATCH / VULNERABILITY DETAIL

CVE-2026-126355

MEDIUMCVSS 5.3NVD feed

Published 13 November 2026 · tracked since 13 November 2026

Description

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf() limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can se

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools