CVE-2024-32652

Summary

CVE-2024-32652 affects the @hono/node-server adapter for Hono applications running on Node.js. This vulnerability causes applications to hang when encountering invalid Host headers, such as an empty string, slashes, or unparseable values. Prior to version 1.10.1, the server was unable to handle these values correctly. The latest release, 1.10.1, includes the necessary fixes to prevent the application from hanging in such cases.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.