CVE-2026-47676 | honojs hono up to 4.12.20 app.mount request smuggling (GHSA-2gcr-mfcq-wcc3)

SecurityVulns
Yanac

A vulnerability, which was classified as problematic, was found in honojs hono up to 4.12.20. The impacted element is the function app.mount. Executing a manipulation can lead to http request smuggling.

This vulnerability is tracked as CVE-2026-47676. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More