The Lab · 2026-04-16 07:22:35 · GitHub Issues
A critical security vulnerability in the popular Hono.js web framework exposes applications to server-side HTML injection attacks. The flaw, tracked as GHSA-458j-xx4x-4375, resides in the framework's JSX/dom component, where improper handling of JSX attribute names can corrupt generated HTML. This creates a direct path...
The Lab · 2026-04-16 09:22:40 · GitHub Issues
A critical security vulnerability in the popular Hono.js web framework exposes applications to server-side HTML injection attacks. The flaw, tracked as GHSA-458j-xx4x-4375, resides in the framework's JSX rendering engine. Improper handling of JSX attribute names allows malformed attribute keys to corrupt the generated ...
The Lab · 2026-04-16 19:23:03 · GitHub Issues
A critical security vulnerability in the popular Hono web framework exposes applications to server-side HTML injection attacks. The flaw, tracked as GHSA-458j-xx4x-4375, resides in the framework's JSX rendering engine. Improper handling of attribute names allows an attacker to use specially crafted, malformed attribute...
The Lab · 2026-04-18 17:22:41 · GitHub Issues
A critical security flaw in the Hono.js web framework's JSX rendering engine allows attackers to inject unintended HTML during server-side rendering. The vulnerability, tracked as GHSA-458j-xx4x-4375, stems from improper handling of JSX attribute names. When untrusted user input is used as attribute keys, specially cra...