MyGit

v4.5.8

honojs/hono

版本发布时间: 2024-08-22 15:14:05

honojs/hono最新发布版本:v4.6.2(2024-09-17 09:16:04)

Security Fix for CSRF Protection Middleware

Before this release, in versions 4.5.7 and below, the CSRF Protection Middleware did not treat requests including Content-Types with uppercase letters (e.g., Application/x-www-form-urlencoded) as potential attacks, allowing them to pass.

This could cause unexpected behavior, leading to a vulnerability. If you are using the CSRF Protection Middleware, please upgrade to version 4.5.8 or higher immediately.

For more details, see the report here: https://github.com/honojs/hono/security/advisories/GHSA-rpfr-3m35-5vx5

相关地址:原始地址 下载(tar) 下载(zip)

查看:2024-08-22发行的版本