CVE-2026-126344 | honojs node-server up to 2.1.5 WebSocket Upgrade upgradeWebSocket cross-site request forgery

November 13, 2026 Yanac

A vulnerability classified as problematic was found in honojs node-server up to 2.1.5. This affects the function upgradeWebSocket of the component WebSocket Upgrade. The manipulation results in cross-site request forgery.

This vulnerability was named CVE-2026-126344. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More