The Lab · 2026-04-16 09:22:42 · GitHub Issues
A critical security flaw in the Hono.js web framework's JSX rendering engine allows attackers to corrupt generated HTML and potentially inject unintended code. The vulnerability, tracked as GHSA-458j-xx4x-4375, stems from improper handling of JSX attribute names during server-side rendering. When untrusted user input i...
The Lab · 2026-04-16 12:23:01 · GitHub Issues
A critical security vulnerability in the popular Hono.js web framework allows attackers to corrupt HTML output and potentially inject unintended code. The flaw, tracked as GHSA-458j-xx4x-4375, resides in the framework's JSX/dom component. It stems from improper handling of JSX attribute names during server-side renderi...
The Lab · 2026-04-29 08:54:08 · GitHub Issues
A security gap in Angular's platform-server package leaves server-side rendering deployments exposed to Server-Side Request Forgery (SSRF) via HTTP absolute-form request targets. The vulnerability exists in the `parseUrl` function within `ServerPlatformLocation`, where a recent patch addressed protocol-relative and bac...