Threat Investigation
Request a demo

CVE-2024-32869

Medium

Description

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with deno, it is possible to traverse the directory where `main.ts` is located. This can result in retrieval of unexpected files. Version 4.2.7 contains a patch for the issue.

SeverityMedium
CVSS5.3
Exploit probability—
ProductHono
PublishedApr 23, 2024
First seenApr 23, 2024
Weakness typeCWE-22Path traversal

How to fix

Update
  • hono hono4.2.7 or later
  • hono4.2.7 or later

Affected products

ProductAffected versionsFixed in
hono honov < 4.2.74.2.7
hononpmv < 4.2.74.2.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.