hono hono

Name: hono hono
Brand: hono

productUS

cpe:2.3:a:hono:hono:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical2high13medium0low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-59139US	—	0.45% (39th)	Exploit	4.9.7	2025-09-12	< 4.9.7
CVE-2024-32869US	—	0.64% (51st)	—	4.2.7	2024-04-23	< 4.2.7
CVE-2023-50710US	medium4.3	0.64% (50th)	—	3.11.7	2023-12-14	< 3.11.7
CVE-2025-58362US	—	0.55% (46th)	—	4.9.6	2025-09-05	4.8.0 → 4.9.6
CVE-2026-29045US	critical9.8	0.53% (45th)	—	4.12.4	2026-03-04	< 4.12.4
CVE-2026-24472US	—	0.52% (44th)	—	4.11.7	2026-01-27	< 4.11.7
CVE-2026-39408US	high7.5	0.50% (43rd)	—	no fix	2026-04-08	4.0.0 → 4.12.11
CVE-2026-24473US	medium5.3	0.48% (41st)	—	4.11.7	2026-01-27	< 4.11.7
CVE-2026-39407US	medium5.3	0.46% (40th)	—	no fix	2026-04-08	≤ 4.12.11
CVE-2025-62610US	—	0.38% (32nd)	—	4.10.2	2025-10-22	1.1.0 → 4.10.2
CVE-2026-24771US	medium4.7	0.37% (31st)	—	4.11.7	2026-01-27	< 4.11.7
CVE-2026-24398US	medium6.5	0.34% (28th)	—	4.11.7	2026-01-27	< 4.11.7
CVE-2026-39409US	medium5.3	0.34% (28th)	—	no fix	2026-04-08	≤ 4.12.11
CVE-2026-59895US	—	0.33% (26th)	—	4.12.27	2026-07-08	4.0.0 → 4.12.27
CVE-2024-48913US	—	0.33% (25th)	—	4.6.5	2024-10-15	< 4.6.5
CVE-2026-59896US	—	0.30% (22nd)	—	4.12.27	2026-07-08	4.11.8 → 4.12.27
CVE-2026-56761US	medium4.3	0.29% (22nd)	—	4.12.14	2026-06-24	< 4.12.14
CVE-2026-39410US	—	0.28% (21st)	—	no fix	2026-04-08	≤ 4.12.11
CVE-2026-27700US	high7.5OT elevated	0.27% (19th)	—	4.12.2	2026-02-25	4.12.0 → 4.12.2
CVE-2026-47676US	—	0.26% (18th)	—	4.12.21	2026-05-28	< 4.12.21
CVE-2026-29085US	—	0.26% (17th)	—	4.12.4	2026-03-04	< 4.12.4
CVE-2026-47674US	—	0.24% (16th)	—	4.12.21	2026-05-28	< 4.12.21
CVE-2024-43787US	—	0.24% (16th)	—	4.5.8	2024-08-22	< 4.5.8
CVE-2026-29086US	—	0.23% (14th)	—	4.12.4	2026-03-04	< 4.12.4
CVE-2026-44456US	—	0.22% (12th)	—	4.12.16	2026-05-13	< 4.12.16
CVE-2026-47675US	medium5.3	0.22% (12th)	—	4.12.21	2026-05-28	< 4.12.21
CVE-2026-44459US	—	0.22% (12th)	—	4.12.18	2026-05-13	< 4.12.18
CVE-2026-47673US	medium6.5	0.20% (10th)	—	4.12.21	2026-05-28	< 4.12.21
CVE-2026-44457US	—	0.20% (9th)	—	4.12.18	2026-05-13	< 4.12.18
CVE-2026-44458US	—	0.20% (9th)	—	4.12.18	2026-05-13	< 4.12.18
CVE-2026-59897US	medium5.3	0.18% (7th)	—	4.12.27	2026-07-08	4.3.3 → 4.12.27
CVE-2026-22817US	medium6.5	0.17% (6th)	—	4.11.4	2026-01-13	< 4.11.4
CVE-2026-44455US	medium6.1	0.14% (3rd)	—	4.12.16	2026-05-13	< 4.12.16
CVE-2026-22818US	medium6.5	0.14% (3rd)	—	4.11.4	2026-01-13	< 4.11.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')2 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-185Incorrect Regular Expression2 CVEs
CWE-285Improper Authorization2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan