Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Cache Middleware contains an information disclosure vulnerability caused by improper handling of HTTP cache control directives. The middleware does not respect standard cache control headers such as `Cache-Control: private` or `Cache-Control: no-store`, which may result in private or authenticated responses being cached and subsequently exposed to unauthorized users. Version 4.11.7 has a patch for the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-24472 Information Disclosure Vulnerability in Hono Web Framework Cache Middleware Before 4.11.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24472
Post summary
The post announces an Information Disclosure vulnerability in the Hono Web Framework’s Cache Middleware (pre‑4.11.7) without providing PoC, exploitation, or patch details.
CVE-2026-24472: Total Recall: Hono Middleware's Unintentional Session Sharing The Hono framework's cache middleware was a little too eager to help, ignoring standard HTTP caching headers like `private` and `no-store`. This resulted in a shared cache i... https://cvereports.com/reports/CVE-2026-24472
Post summary
The post announces CVE-2026-24472 in Hono Middleware, describing the cache middleware’s failure to honor standard HTTP caching headers, which can cause unintended session sharing. No proof‑of‑concept, patch, or evidence of active exploitation is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hono | hono | - | node.js | - |