Skip to content

Fix hono SSR memo isolation - #595

Merged
bcorfman merged 1 commit into
mainfrom
agent/security-hono-ssr-memo
Aug 19, 2026
Merged

Fix hono SSR memo isolation#595
bcorfman merged 1 commit into
mainfrom
agent/security-hono-ssr-memo

Conversation

@bcorfman

Copy link
Copy Markdown
Owner

Override hono to the 4.12.34 patched release. This addresses Dependabot alert #73 (SSR memo() cross-request data disclosure).

Validation: npm install --package-lock-only --ignore-scripts --no-audit --no-fund.

@bcorfman
bcorfman merged commit f32c2b9 into main Aug 19, 2026
8 checks passed
@bcorfman
bcorfman deleted the agent/security-hono-ssr-memo branch August 19, 2026 03:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant