Threats tagged 'ghsa-h7mg-cq63-vhpq'

Hono's RegExpRouter in versions >=4.1.4 and <4.13.16 has a vulnerability where wildcard middleware is skipped in certain routing scenarios, allowing unauthenticated clients to reach route handlers or the not-found handler without middleware enforcement. This affects applications relying on RegExpRouter or the default SmartRouter for authentication or authorization middleware on wildcard paths. The issue is fixed in version 4.13.16.