01 Record

CVE-2026-73565

@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake

MediumPUBLISHEDCNA: GitHub_M

Base score5.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

02 Description

@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake

Published: 2026-08-13 17:37Z1 DAY AGO
Last updated: 2026-08-14 16:45Z1 HR AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 5.3)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses: CWE-401 CWE-770
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: aa5068d450495724b00a890788ed48809d6b73fc617e101595b76d9c74b355d3

VendorProductVersionsPlatforms

honojsnode-server>= 2.0.0, < 2.0.10—