CVE-2024-32652

Published: Apr 19, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

The adapter @hono/node-server allows you to run your Hono application on Node.js. Prior to 1.10.1, the application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those that cannot be parsed by the `URL` as a hostname such as an empty string, slashes `/`, and other strings. The version 1.10.1 includes the fix for this issue.

Affected (1)

Products: Hono: Node Server

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hono Node Server	From 1.3.0 to 1.10.1

Related CWEs

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (6)

https://github.com/honojs/node-server/commit/d847e60249fd8183ba0998bc379ba20505643204

Source: security-advisories@github.com

Patch

https://github.com/honojs/node-server/issues/159

Source: security-advisories@github.com

ExploitIssue TrackingThird Party Advisory

https://github.com/honojs/node-server/security/advisories/GHSA-hgxw-5xg3-69jx

Source: security-advisories@github.com

Vendor Advisory

https://github.com/honojs/node-server/commit/d847e60249fd8183ba0998bc379ba20505643204

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/honojs/node-server/issues/159

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://github.com/honojs/node-server/security/advisories/GHSA-hgxw-5xg3-69jx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.