Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-59895 · Microsoft / collected KEV context

EUVD-2026-42327

GHSA-w62v-xxxg-mg59

cve-program · CVE-2026-59895

• https://github.com/honojs/hono/security/advisories/GHSA-w62v-xxxg-mg59
• https://github.com/honojs/hono/commit/cd3f6f7194f0e5c9d4b26ae0cf232018d0f388fc
• https://github.com/honojs/hono/releases/tag/v4.12.27

euvd · EUVD-2026-42327

• https://github.com/honojs/hono/security/advisories/GHSA-w62v-xxxg-mg59
• https://github.com/honojs/hono/commit/cd3f6f7194f0e5c9d4b26ae0cf232018d0f388fc
• https://github.com/honojs/hono/releases/tag/v4.12.27

nvd · CVE-2026-59895

• https://github.com/honojs/hono/commit/cd3f6f7194f0e5c9d4b26ae0cf232018d0f388fc
• https://github.com/honojs/hono/releases/tag/v4.12.27
• https://github.com/honojs/hono/security/advisories/GHSA-w62v-xxxg-mg59

osv · GHSA-w62v-xxxg-mg59

• https://github.com/honojs/hono/security/advisories/GHSA-w62v-xxxg-mg59
• https://nvd.nist.gov/vuln/detail/CVE-2026-59895
• https://github.com/honojs/hono/commit/cd3f6f7194f0e5c9d4b26ae0cf232018d0f388fc
• https://github.com/honojs/hono
• https://github.com/honojs/hono/releases/tag/v4.12.27

No related operational record is retained in the current change model.