Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapter (`hono/aws-lambda`) behind an Application Load Balancer (ALB), the `getConnInfo()` function incorrectly selected the first value from the `X-Forwarded-For` header. Because AWS ALB appends the real client IP address to the end of the `X-Forwarded-For` header, the first value can be attacker-controlled. This could allow IP-based access control mechanisms (such as the `ipRestriction` middleware) to be bypassed. Version 4.12.2 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-24 | 1 | Disclosure1 |
| 2026-02-25 | 2 | Disclosure2 |
| 2026-02-28 | 2 | Disclosure1General1 |
初CVE取った～ IP Spoofingが可能な脆弱性 CVE-2026-27700 https://github.com/honojs/hono/security/advisories/GHSA-xh87-mx6m-69f3 https://t.co/xH8GU2wt09
Post summary
A new CVE (CVE-2026-27700) has been disclosed, indicating an IP spoofing vulnerability.
🚨*CVE* CVE-2026-27700 Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapter (`hono/aws-lamb… https://www.cve.org/CVERecord?id=CVE-2026-27700 ----- Traducción: CVE-2026-27700 Hon… http://infoflow.cloud`
Post summary
The post announces CVE-2026-27700, noting it affects Hono framework versions 4.12.0 and 4.12.1 when using the AWS Lambda adapter, and provides a link to the CVE record.
CVE-2026-27700 Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapter (`hono/aws-lamb… https://www.cve.org/CVERecord?id=CVE-2026-27700
Post summary
The text references CVE-2026-27700 affecting Hono framework versions 4.12.0 and 4.12.1 when using the AWS Lambda adapter, but provides no further technical or mitigation details.
🟠 CVE-2026-27700 - High Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapter (`hono/aws-lambda`) behind an Applicatio... https://www.thehackerwire.com/vulnerability/CVE-2026-27700/ https://t.co/ZrJLCq4c1g
Post summary
The post announces a high‑severity vulnerability in Hono’s AWS Lambda adapter affecting versions 4.12.0 and 4.12.1, but provides no PoC, exploit, or patch details.
**CVE-2026-27700** pertains to a flaw in the Hono web application framework, specifically in versions **4.12.0** and **4.12.1**. When used with the `hono/aws-lambda` adapter behind an AWS Application Load Balancer (ALB), the `getConnInfo()` function incorrectly processes the `X-Forwarded-For` header. The root issue is that the function selects the first value from this header, which ALB appends the real client IP address to the end of the header. Consequently, an attacker can manipulate the first value, leading to potential bypasses of IP-based access controls. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution https://cvetodo.com/cve/CVE-2026-27700
Post summary
The post discloses a flaw in Hono 4.12.0/4.12.1 where getConnInfo() mishandles X-Forwarded-For headers behind an ALB, allowing attackers to manipulate the first value and bypass IP-based access controls.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hono | hono | - | node.js | - |