Skip to content

hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR

Moderate severity GitHub Reviewed Published Apr 15, 2026 in honojs/hono • Updated Apr 16, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts