THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-54fx-42gc-7vw4 (medium) — Hono: Algorithmic Complexity DoS in Language Middleware

[GHSA] GHSA-54fx-42gc-7vw4 (medium) — Hono: Algorithmic Complexity DoS in Language Middleware

medgithub_advisoriesPublished 2026-08-07

GHSA-54fx-42gc-7vw4 Severity: medium CVE: CVE-2026-71848

Hono: Algorithmic Complexity DoS in Language Middleware

### Summary

The `languageDetector` middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags.

### Details

To implement progressive language-tag truncation, `normalizeLanguage()`

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-71848cve

Original source: https://github.com/advisories/GHSA-54fx-42gc-7vw4