CVE-2026-24771

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, a Cross-Site Scripting (XSS) vulnerability exists in the `ErrorBoundary` component of the hono/jsx library. Under certain usage patterns, untrusted user-controlled strings may be rendered as raw HTML, allowing arbitrary script execution in the victim's browser. Version 4.11.7 patches the issue.

• CWE-79

• https://github.com/honojs/hono/commit/2cf60046d730df9fd0aba85178f3ecfe8212d990Patch
• https://github.com/honojs/hono/security/advisories/GHSA-9r54-q6cx-xmh5Vendor Advisory

Published

Jan 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-24765PHPUnit is a testing framework for PHP. A vulnerability has …7.8
• CVE-2026-24766NocoDB is software for building databases as spreadsheets. P…4.9
• CVE-2026-24767NocoDB is software for building databases as spreadsheets. P…6.4
• CVE-2026-24768NocoDB is software for building databases as spreadsheets. P…6.1
• CVE-2026-24769NocoDB is software for building databases as spreadsheets. P…9
• CVE-2026-24770RAGFlow is an open-source RAG (Retrieval-Augmented Generatio…9.8
• CVE-2026-24772OpenProject is an open-source, web-based project management …9
• CVE-2026-24773The Open eClass platform (formerly known as GUnet eClass) is…7.5
• CVE-2026-24774The Open eClass platform (formerly known as GUnet eClass) is…4.3
• CVE-2026-24775OpenProject is an open-source, web-based project management …7.3
• CVE-2026-24776OpenProject is an open-source, web-based project management …4.3
• CVE-2026-24777OpenProject is an open-source, web-based project management …6.7