PT-2026-5014
CVE-2026-24771
·
Published
2026-01-27
·
Updated
2026-02-04
Description by
CVSS 3.1
4.7
MediumMetricsAV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Hono versions prior to 4.11.7
Description
A Cross-Site Scripting (XSS) issue exists in the
ErrorBoundary component of the hono/jsx library. Untrusted data from users may be rendered as raw HTML, potentially allowing execution of arbitrary scripts in a user's browser.Recommendations
Update to version 4.11.7 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾