What is CVE-2025-62610?

CVE-2025-62610 is a high-severity vulnerability in Honojs Hono, classified under Improper Authorization. CVSS score: 8.1/10. Published 2025-10-22.

How severe is CVE-2025-62610?

High severity. CVSS v3 base score is 8.1 out of 10.

Auth bypass in Honojs Hono

CVE-2025-62610

Hono is a Web application framework that provides support for any JavaScript runtime. In versions from 1.1.0 to before 4.10.2, Hono’s JWT Auth Middleware does not provide a built-in aud (Audience) verification option, which can cause confu…

EPSS: 0.001 (18.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N.

Affected products

Honojs Hono — versions >= 1.1.0, < 4.10.2

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

https://github.com/honojs/hono/security/advisories/GHSA-m732-5p4w-x69g (x_refsource_CONFIRM)
https://github.com/honojs/hono/commit/45ba3bf9e3dff8e4bd85d6b47d4b71c8d6c66bef (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-62610?: CVE-2025-62610 is a high-severity vulnerability in Honojs Hono, classified under Improper Authorization. CVSS score: 8.1/10. Published 2025-10-22.
How severe is CVE-2025-62610?: High severity. CVSS v3 base score is 8.1 out of 10.