CVE-2026-39410
Cookie Prefix Protection Bypass in Hono
HonoにおけるCookie Prefix保護のバイパス
In Hono versions prior to 4.12.12, a discrepancy between browser cookie parsing and Hono's parsing allows cookie prefix protections to be bypassed.
Disclosure Date
2026/4/7
Credit
tikitiki ( @koketiki )
Reference
・https:///honojs/hono/security/advisories/GHSA-r5rp-j6wh-rvv4