{"schemaVersion":3,"id":"CVE-2026-71850","aliases":["CGA-2j6f-7c7w-9272","CGA-w6fv-2853-8g37","CGA-wmh4-2fg8-x9v5","GHSA-f23p-vx2j-j53r","CGA-2j8r-jxf6-c7f9","CGA-2j96-93g3-7j36","CGA-2mjq-w5q2-crwf","CGA-2rwr-g9qg-gr45","CGA-34cq-hqf7-2xvp","CGA-3749-h4qq-h7v5","CGA-38qw-vgvg-x4hj","CGA-3crj-65g3-3cjq","CGA-3jpx-qhq5-vx98","CGA-3jwq-qhj2-5hmj","CGA-3q4m-p3v8-c59g","CGA-3q58-p26h-85j7","CGA-42x5-fh4q-2xqc","CGA-4476-m4qw-rh3m","CGA-46jm-mhjp-38p8","CGA-4r2c-gvfm-m8f7","CGA-52r6-m4wv-8xfr","CGA-5v7x-cpfm-w2wg","CGA-66c4-jxfp-q985","CGA-6hcj-935v-784c","CGA-72gr-qv8p-wggf","CGA-743w-rpjr-3qr7","CGA-7h9f-9x3c-9g72","CGA-7pqp-9r56-fx8c","CGA-834m-vhm7-v3g4","CGA-84cm-r9pw-rfrm","CGA-8636-rqgr-vwq3","CGA-88gp-mm75-5755","CGA-8pjc-r6rq-jrjm","CGA-8qvj-vw6h-m6pw","CGA-8r2g-c3ww-6qc9","CGA-8xm8-3xjg-wf2h","CGA-932q-7w64-cm2p","CGA-93m2-8g74-654x","CGA-9ccj-24xq-9gmg","CGA-9rv4-mf5g-ggfm","CGA-9wxh-qc6v-2m8r","CGA-9xpm-2cj3-wvm4","CGA-c7hq-xm76-q2wg","CGA-c7mp-cxq8-45x5","CGA-cj79-qr9r-rrjx","CGA-f3h6-6vf8-wgj6","CGA-f5xw-r47g-2c77","CGA-fcp2-49qg-hv57","CGA-fj28-fh62-53q8","CGA-g4m2-77p3-xjpx","CGA-g4qv-qpmh-4hfx","CGA-g7qc-f7c6-cw66","CGA-gc8r-wjfp-9vjf","CGA-gj2f-wjwf-6wjx","CGA-gpwr-fgrm-q86w","CGA-h3vr-5c2q-r4jm","CGA-h8pc-jh9h-xv45","CGA-hh45-7mhw-6fqf","CGA-j256-gq89-m9x8","CGA-j2v8-qfc2-mhh3","CGA-j745-3pp4-pqhm","CGA-j7q8-27px-g252","CGA-jh4w-wm6p-994f","CGA-jmjv-69xg-w74h","CGA-jqqq-f7fq-8rh5","CGA-jv4f-h7xp-53v4","CGA-jxc5-r4qm-qwrr","CGA-m4vx-3h9p-99vr","CGA-m5vv-xhqc-rhfc","CGA-ppf4-2j8m-jj46","CGA-ppvm-m968-34hr","CGA-pqpf-93vh-qvh5","CGA-q3w8-4r43-fmh5","CGA-qc9x-wcr9-mvrj","CGA-qccj-v5xw-h335","CGA-qffp-fx67-m852","CGA-qq3h-93c9-x465","CGA-r8x7-r6c6-x6w2","CGA-rhx6-jmwc-q84v","CGA-vc27-m2hf-3jmf","CGA-vh3g-36rr-r37w","CGA-vp6f-fr88-457c","CGA-vqxm-jfw8-3wxq","CGA-w298-h9pw-pp35","CGA-w379-jv6f-2rp6","CGA-w6x8-5r97-f29j","CGA-wj62-7w8x-9cpw","CGA-wr8q-cg8f-8pm2","CGA-wxhj-fqcm-wgc2","CGA-x5j7-c5pr-vfr7"],"status":"published","duplicateOf":null,"title":null,"description":"Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from hono/jsx retains the result of a server side render and reuses it for later renders with comparator equal props, and request scoped values read inside the component take no part in that comparison, so a response can contain HTML rendered for another user's request. Components wrapped with memo() are compared by props alone; values read implicitly during rendering, such as JSX Context through createContext() and useContext(), useRequestContext() from hono/jsx-renderer, and getContext() from hono/context-storage, do not participate, and the retained result lives as long as the wrapped component, so it outlives the request that produced it. A user may receive a response containing HTML rendered for another user when both render the same memoized component with comparator equal props on the same warm instance, which may disclose another user's account or profile data, disclose request scoped secrets embedded in HTML such as CSRF tokens, or expose role specific content to users who should not receive it. This issue is fixed in version 4.12.34.","dates":{"published":"2026-08-07T18:41:17.068Z","modified":"2026-08-10T13:26:55.984Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.8,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00267,"percentile":0.177,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.10300000000000001,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00164},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00267,"percentile":0.177}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00267,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00267,"percentile":0.177}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-488","name":"Exposure of Data Element to Wrong Session","description":"The product does not sufficiently enforce boundaries between the states of different sessions, causing data to be provided to, or used by, the wrong session.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/488.html"}],"affected":[{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4-iamguarded","name":"kibana-9.4-iamguarded","label":"kibana-9.4-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4-iamguarded","purlType":"apk","versions":[{"text":"< 9.4.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4-worker","name":"langfuse-4-worker","label":"langfuse-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4-worker","purlType":"apk","versions":[{"text":"< 4.7.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4-worker","name":"langfuse-fips-4-worker","label":"langfuse-fips-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4-worker","purlType":"apk","versions":[{"text":"< 4.7.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin","name":"wazuh-dashboard-alerting-dashboards-plugin","label":"wazuh-dashboard-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin-fips","name":"wazuh-dashboard-alerting-dashboards-plugin-fips","label":"wazuh-dashboard-alerting-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-maps","name":"wazuh-dashboard-dashboards-maps","label":"wazuh-dashboard-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-maps","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-maps-fips","name":"wazuh-dashboard-dashboards-maps-fips","label":"wazuh-dashboard-dashboards-maps-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-maps-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-notifications","name":"wazuh-dashboard-dashboards-notifications","label":"wazuh-dashboard-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-notifications","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-notifications-fips","name":"wazuh-dashboard-dashboards-notifications-fips","label":"wazuh-dashboard-dashboards-notifications-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-notifications-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting","name":"wazuh-dashboard-dashboards-reporting","label":"wazuh-dashboard-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting-fips","name":"wazuh-dashboard-dashboards-reporting-fips","label":"wazuh-dashboard-dashboards-reporting-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-visualizations","name":"wazuh-dashboard-dashboards-visualizations","label":"wazuh-dashboard-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-visualizations-fips","name":"wazuh-dashboard-dashboards-visualizations-fips","label":"wazuh-dashboard-dashboards-visualizations-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-visualizations-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin","name":"wazuh-dashboard-index-management-dashboards-plugin","label":"wazuh-dashboard-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin-fips","name":"wazuh-dashboard-index-management-dashboards-plugin-fips","label":"wazuh-dashboard-index-management-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins","name":"wazuh-dashboard-plugins","label":"wazuh-dashboard-plugins","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-plugins-fips","name":"wazuh-dashboard-plugins-fips","label":"wazuh-dashboard-plugins-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin","name":"wazuh-dashboard-security-plugin","label":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"honojs","product":"hono","name":"hono","label":"hono","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.8.0, < 4.12.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.8.0, < 4.12.34","eol":null,"hubHref":"/vendor/honojs/hono"},{"vendor":"Npm","product":"hono","name":"hono","label":"hono","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/hono","purlType":"npm","versions":[{"text":"≥ 3.8.0, < 4.12.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.8.0, < 4.12.34","eol":null,"hubHref":null}],"affectedCount":43,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/honojs/hono/security/advisories/GHSA-f23p-vx2j-j53r","label":"github.com/honojs/hono/security/advisories/GHSA-f23p-vx2j-j53r","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71850.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71850.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71850","label":"nvd.nist.gov/vuln/detail/CVE-2026-71850","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/honojs/hono/commit/0c45036d6b0ddf42ab2fa44639dc8710825d5c0f","label":"github.com/honojs/hono/commit/0c45036d6b0ddf42ab2fa44639dc8710825d5c0f","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/honojs/hono","label":"github.com/honojs/hono","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/honojs/hono/releases/tag/v4.12.34","label":"github.com/honojs/hono/releases/tag/v4.12.34","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-CW4J-5MM7-JM8G"]},"timeline":[{"kind":"published","date":"2026-08-07T18:41:17.068Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-10T13:26:55.984Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":19,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:19:01.396Z","stale":false,"partial":false}}