{"schemaVersion":3,"id":"CVE-2026-69207","aliases":["CGA-77c4-q8vm-22vg","CGA-m4rm-242m-gchj","CGA-pvw3-2h7q-cr6g","GHSA-8j4g-w8fx-2239","CGA-2359-m9jf-jhg8","CGA-273g-wgj8-3xcr","CGA-347j-h5mg-c3xc","CGA-35q8-2jw7-q2cc","CGA-39vh-4p3h-mxjq","CGA-3cfq-w8c9-6xfp","CGA-3hwx-rgpp-gf7h","CGA-44f2-39pp-jhwp","CGA-4jfv-jmpx-428w","CGA-4m7w-x5cw-q9pf","CGA-52fq-9vjq-6xvg","CGA-55mf-35j2-jxpm","CGA-5hxj-jhj3-v625","CGA-5qm5-pxqv-x365","CGA-5x6m-283c-cxwj","CGA-635j-8mg6-36h4","CGA-63r7-8w4g-f8rm","CGA-6cjx-qh75-pq78","CGA-6gr9-q2gj-4pv3","CGA-6hrm-33wx-7cq8","CGA-6jw3-jr52-47r2","CGA-6qw8-9w4c-pq2w","CGA-6r2g-3q6h-p464","CGA-6v46-xxwg-c7mf","CGA-6wrj-q69j-vrqv","CGA-73q7-m3jf-f625","CGA-7735-6c6x-f2mg","CGA-7gpr-93rr-rv3m","CGA-7hq6-3qwx-pr6q","CGA-7w5c-7mw2-vr85","CGA-7x6p-7wfq-4xmr","CGA-8fjw-xmhv-wwr6","CGA-8fwf-25pr-784w","CGA-8jmw-fp93-w45g","CGA-8pg4-q5pf-3439","CGA-8pjp-6vw6-jxmp","CGA-8vqj-v8r6-fgw8","CGA-8xf6-558v-3vc9","CGA-99v9-x586-g92q","CGA-9fg2-9w4v-46f7","CGA-9w3f-q7vf-68mr","CGA-9w7x-g2q7-687w","CGA-c26x-pwgv-vqqp","CGA-c47r-4x27-gfx4","CGA-c4jh-r3h5-qxj6","CGA-cj96-m3q8-6483","CGA-cjch-579j-79gc","CGA-cpp9-mxcx-67pj","CGA-cqrh-frqw-5w58","CGA-cr6c-jmmr-vq33","CGA-cr95-qhp8-pqm4","CGA-cx5p-cfmm-j783","CGA-f4m4-gc8x-q8f7","CGA-f78x-4g42-2r27","CGA-f8rx-wqx9-3x53","CGA-fgwv-rmwx-ffjv","CGA-fm4c-4x6f-xwv5","CGA-fp7h-3x3j-3pgg","CGA-fwwg-9rvv-mmg3","CGA-fx2f-rh9q-28v3","CGA-g3mx-x2mr-5xf3","CGA-g9cw-m4h5-8qrx","CGA-gfmh-fmxq-qv9w","CGA-gv2p-qvgg-c8m4","CGA-gx24-fm7g-vvr9","CGA-h25p-fmgv-94pw","CGA-h7gp-7vvm-4vrp","CGA-hmh2-xp3m-rj2f","CGA-hmr5-v4g3-hhfx","CGA-hx5w-6jrv-fh6f","CGA-j72j-j5c7-cr52","CGA-jph3-ghw5-pr76","CGA-jw27-mxxf-pvh7","CGA-mf6j-hc72-378g","CGA-mm47-vmmh-ph5p","CGA-mrcf-fxwc-c296","CGA-mx77-pmqj-29gr","CGA-p3f6-vgrc-rvcc","CGA-p4x9-fc9f-qrg4","CGA-p6c5-cxxr-v9xh","CGA-p9f5-534j-xcpm","CGA-pcxp-pq52-x6xr","CGA-pp3v-76rp-qj7m","CGA-pxcq-r4vq-x55v","CGA-q73r-ppvq-wgqv","CGA-q956-pc2m-43rv","CGA-qpmh-mxmg-g22w","CGA-qx5p-gmcf-jjp2","CGA-r28v-2gjm-chqj","CGA-r567-gxh9-gwjr","CGA-rc26-jv64-ccvg","CGA-rj8f-whvc-7xfx","CGA-rjrw-4hcg-9f72","CGA-rmjp-32vm-652j","CGA-rq7x-4q9x-fw6g","CGA-rvp6-hxg6-366h","CGA-v4qr-rfj3-62w9","CGA-v5r4-cvfx-8f7x","CGA-v8fc-r9qc-frp4","CGA-vfff-v74h-rm7m","CGA-w5mp-6qvj-f9gf","CGA-w8qp-55x6-r9vx","CGA-wc79-3m3v-92rh","CGA-wcwq-hg9c-r65x","CGA-wmg5-w9h8-hvw6","CGA-wpp2-wjpv-qwm5","CGA-wrff-r2g8-5pwr","CGA-x94x-4cp6-x53f","CGA-xf2h-j8rq-wpx3","CGA-xf55-q3f9-ffjp","CGA-xw7g-xg68-6266","CGA-xwvr-r4w8-vpvp"],"status":"published","duplicateOf":null,"title":null,"description":"Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, is vulnerable to a regular expression denial of service (ReDoS). During a preflight OPTIONS request, the middleware parses the attacker-controlled Access-Control-Request-Headers header using a whitespace-tolerant regular expression whose backtracking makes its running time quadratic in the input length. Because the header value is bounded only by the deployment's maximum HTTP header size, a single preflight carrying a long run of whitespace can consume seconds of CPU and block request processing. On runtimes that share one execution thread across requests, this stalls concurrent requests as well, and repeated requests can render the service unresponsive. This affects the default configuration, since the vulnerable path is reached whenever cors() is used with an unset or empty allowHeaders. Applications that set a non-empty allowHeaders are not affected. This issue is fixed in version 4.12.34.","dates":{"published":"2026-08-07T20:51:04.300Z","modified":"2026-08-10T13:33:18.783Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00609,"percentile":0.48425,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.12100000000000001,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00488},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00609,"percentile":0.48425}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00609,"percentile":0.48425}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-1333","name":"Inefficient Regular Expression Complexity","description":"The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/1333.html"}],"affected":[{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gemini-cli","name":"gemini-cli","label":"gemini-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gemini-cli","purlType":"apk","versions":[{"text":"< 0.49.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.49.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono","name":"hono","label":"hono","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-adapter-mqtt","name":"hono-adapter-mqtt","label":"hono-adapter-mqtt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-adapter-mqtt","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-cli","name":"hono-cli","label":"hono-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-cli","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-compat","name":"hono-compat","label":"hono-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-service-auth","name":"hono-service-auth","label":"hono-service-auth","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-service-auth","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-service-command-router","name":"hono-service-command-router","label":"hono-service-command-router","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-service-command-router","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-service-device-registry-jdbc","name":"hono-service-device-registry-jdbc","label":"hono-service-device-registry-jdbc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-service-device-registry-jdbc","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.8-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4-iamguarded","name":"kibana-9.4-iamguarded","label":"kibana-9.4-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4-iamguarded","purlType":"apk","versions":[{"text":"< 9.4.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4-worker","name":"langfuse-4-worker","label":"langfuse-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4-worker","purlType":"apk","versions":[{"text":"< 4.7.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4-worker","name":"langfuse-fips-4-worker","label":"langfuse-fips-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4-worker","purlType":"apk","versions":[{"text":"< 4.7.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin","name":"wazuh-dashboard-alerting-dashboards-plugin","label":"wazuh-dashboard-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin-fips","name":"wazuh-dashboard-alerting-dashboards-plugin-fips","label":"wazuh-dashboard-alerting-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-maps","name":"wazuh-dashboard-dashboards-maps","label":"wazuh-dashboard-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-maps","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-maps-fips","name":"wazuh-dashboard-dashboards-maps-fips","label":"wazuh-dashboard-dashboards-maps-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-maps-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-notifications","name":"wazuh-dashboard-dashboards-notifications","label":"wazuh-dashboard-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-notifications","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-notifications-fips","name":"wazuh-dashboard-dashboards-notifications-fips","label":"wazuh-dashboard-dashboards-notifications-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-notifications-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting","name":"wazuh-dashboard-dashboards-reporting","label":"wazuh-dashboard-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting-fips","name":"wazuh-dashboard-dashboards-reporting-fips","label":"wazuh-dashboard-dashboards-reporting-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-visualizations","name":"wazuh-dashboard-dashboards-visualizations","label":"wazuh-dashboard-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-visualizations-fips","name":"wazuh-dashboard-dashboards-visualizations-fips","label":"wazuh-dashboard-dashboards-visualizations-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-visualizations-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin","name":"wazuh-dashboard-index-management-dashboards-plugin","label":"wazuh-dashboard-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin-fips","name":"wazuh-dashboard-index-management-dashboards-plugin-fips","label":"wazuh-dashboard-index-management-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins","name":"wazuh-dashboard-plugins","label":"wazuh-dashboard-plugins","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins-fips","name":"wazuh-dashboard-plugins-fips","label":"wazuh-dashboard-plugins-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin","name":"wazuh-dashboard-security-plugin","label":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"honojs","product":"hono","name":"hono","label":"hono","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.12.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.34","eol":null,"hubHref":"/vendor/honojs/hono"},{"vendor":"Npm","product":"hono","name":"hono","label":"hono","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/hono","purlType":"npm","versions":[{"text":"< 4.12.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.34","eol":null,"hubHref":null}],"affectedCount":54,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/honojs/hono/security/advisories/GHSA-8j4g-w8fx-2239","label":"github.com/honojs/hono/security/advisories/GHSA-8j4g-w8fx-2239","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/honojs/hono/commit/93fc250d8b4df58ea542cb945171de8013d5e6d5","label":"github.com/honojs/hono/commit/93fc250d8b4df58ea542cb945171de8013d5e6d5","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/honojs/hono/releases/tag/v4.12.34","label":"github.com/honojs/hono/releases/tag/v4.12.34","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69207.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69207.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69207","label":"nvd.nist.gov/vuln/detail/CVE-2026-69207","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/honojs/hono","label":"github.com/honojs/hono","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-HXPP-GW7P-Q2JX"]},"timeline":[{"kind":"published","date":"2026-08-07T20:51:04.300Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-10T13:33:18.783Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:36:43.342Z","stale":false,"partial":false}}