Headers.set of the component X-Forwarded-For Handler. Executing a manipulation can lead to use of less trusted source.
This vulnerability appears as CVE-2026-54289. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-54289 | honojs hono up to 4.12.24 X-Forwarded-For Headers.set less trusted source (GHSA-wgpf-jwqj-8h8p / EUVD-2026-38330)
Reagiere als Erste:r — dein Feedback zählt!
A vulnerability classified as problematic was found in honojs hono up to 4.12.24. Affected is the function
SOCIAL SHARE CARD GENERATOR