CVE-2026-81888 | honojs hono/oauth-providers up to 0.8.5 OAuth Callback state cross-site request forgery

A vulnerability, which was classified as problematic, was found in honojs hono and oauth-providers up to 0.8.5. This affects an unknown part of the component OAuth Callback Handler. The manipulation of the argument state results in cross-site request forgery.

This vulnerability is identified as CVE-2026-81888. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More