@hono/oauth-providers vulnerabilities

CVEs whose affected-version data names the @hono/oauth-providers package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-81888Medium· 5.4

3w ago

@hono/oauth-providers is Authentication middleware for Hono

@hono/oauth-providers is Authentication middleware for Hono. Prior to version 0.8.6, the built-in social login providers accept an OAuth callback even when the `state` value is absent on both sides, so the anti-CSRF check passes for a ca…

▾ Sunlithono · @hono/oauth-providersEPSS 0.19%via NVD