CVE-2026-93981 | honojs hono up to 4.13.6 JSX Rendering hono/jsx/dom/server renderToString/renderToReadableStream cross site scripting

A vulnerability categorized as problematic has been discovered in honojs hono up to 4.13.6. Impacted is the function renderToString/renderToReadableStream of the file hono/jsx/dom/server of the component JSX Rendering. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-93981. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More