search

jcs224 / hono_sessions

Cookie-based sessions for Hono applications
https://jsr.io/@jcs224/hono-sessions
MIT License
53 stars 6 forks source link

Update hono dependency to 3.11.7 or later to fix security issue #5

Closed JoelEBorjesson closed 5 months ago

JoelEBorjesson commented 5 months ago

As title says, this update fixes an security issue with hono and their TrieRouter

Have a nice day:)

jcs224 commented 5 months ago

Hi there,

The security issue in Hono shouldn't have any impact on the security of this package. If you wish to use the latest version of Hono with this package, you can use the overrides feature of NPM package.json to overcome the type mismatch between versions. The only use of Hono as a dependency in this package is for the types.

https://docs.npmjs.com/cli/v9/configuring-npm/package-json#overrides