Threats tagged 'ghsa-4h7h-rv7c-7m2v'

The Hono framework's `validator('form')` function improperly validates `multipart/form-data` requests when the Content-Type header includes extra parameters beyond a single boundary parameter. This causes the validator to skip validation and pass an empty object to the callback, allowing form fields to bypass intended validation checks. The issue affects versions from 4.5.1 up to but not including 4.13.16 and is fixed in version 4.13.16.