VDB
GHSA-gq3j-xvxp-8hrf
GHSA-gq3j-xvxp-8hrf
PUBLISHED
CVSS 8.699999809265137 HIGH
Hono added timing comparison hardening in basicAuth and bearerAuth
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | kibana-9.3 | 0 |
| chainguard | opensearch-dashboards-2-fips | 0 |
| chainguard | kibana-9.1 | 0 |
| npm | hono | 0 |
| chainguard | langfuse-fips-3 | 0 |
| chainguard | opensearch-dashboards-2 | 0 |
| chainguard | kibana-9.2 | 0 |
| chainguard | langfuse-3 | 0 |
| chainguard | librechat | 0 |
| wolfi | langfuse-3 | 0 |
| wolfi | opensearch-dashboards-2 | 0 |
Timeline
- Feb 19, 2026 CVE Published
References
- https://github.com/advisories/GHSA-gq3j-xvxp-8hrf advisory
- https://github.com/honojs/hono/security/advisories/GHSA-gq3j-xvxp-8hrf url
- https://github.com/honojs/hono/commit/91def7cab654bad5eecc9270e6620d577971ff5e patch
- https://github.com/honojs/hono url
- https://github.com/honojs/hono/releases/tag/v4.11.10 url