CVE-2026-56763 is a medium-severity vulnerability in Hono, a JavaScript framework, that allows for prototype pollution via the __proto__ key in parseBody with dot option enabled. This vulnerability can be exploited to achieve prototype pollution and modify object behavior when parsed results are merged into regular JavaScript objects using unsafe merge patterns. The vulnerability affects Hono versions pri [truncated]
CVE-2026-56762 is a medium-severity vulnerability in Hono before 4.12.12. The vulnerability occurs because Hono does not validate cookie names on the write path in the setCookie(), serialize(), and serializeSigned() functions. This allows invalid characters, such as control characters (e.g., <br> or <n), when an application passes a user-controlled cookie name. The issue primarily affects correctness and [truncated]
