CVE-2025-59139

Medium

Advisory

Published 12 Sept 2025In the index since 6 Sept 2026

Hono has Body Limit Middleware Bypass

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
hononpm	4.6.12, 4.7.11	4.9.7	2

2 by stars

Chart

Latest

Affected images

Radar Score

cosmocosmo-platform

1 of the 10 container images this version deploys carry CVE-2025-59139.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/cdn :0.14.1	d86fcf169f15	hono@4.6.12	4.9.7

28,839

karakeepself-hosters-by-night

1 of the 1 container images this version deploys carry CVE-2025-59139.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	hono@4.7.11	4.9.7

5,213

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	hono@4.7.11	4.9.7	1
ghcr.io/wundergraph/cosmo/cdn :0.14.1	d86fcf169f15	hono@4.6.12	4.9.7	1