What’s Vulnerable › Products

honojs @hono/oauth-providers vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your honojs @hono/oauth-providers version is affected

Latest honojs @hono/oauth-providers vulnerabilities

• CVE-2026-81888 — @hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking (CVSS 5.4)