hono
js · honoHeads-up
Hono: Encoded backslash path traversal on Windows
On Windows hosts, an encoded backslash (%5C) in the request path decodes to \, which the Windows path resolver treats as a separat
17 Jun 2026 · schedule it
js · honoHeads-up
Hono AWS Lambda@Edge Adapter: Repeated Headers Truncated to Single Value
The AWS Lambda@Edge adapter for Hono incorrectly uses `Headers.
17 Jun 2026 · schedule it
js · honoHeads-up
Hono Body Limit Middleware trusts Content-Length header, enabling bypass on AWS Lambda
The Body Limit Middleware trusts the client-declared Content-Length header without verifying actual body size, allowing bypass on
17 Jun 2026 · schedule it