HO
Product
@hono/oauth-providers
by honojs · last CVE Aug 31, 2026
1
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add @hono/oauth-providers to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81888
5.4
0%
Aug 31
@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking
Affected: < 0.8.6
Showing 1