Threats tagged 'ghsa-qv5m-9pm6-hqp3'

A vulnerability in @hono/node-server versions >=2.0.0 and <2.1.6 allows an unauthenticated client to crash the server process by sending a WebSocket upgrade request and resetting the TCP connection before the application responds. This occurs because the socket lacks an error listener during asynchronous middleware execution, causing an unhandled ECONNRESET error that terminates the process. The issue is fixed in version 2.1.6.