admin/tavily-ai-tavily-mcp
1
0
Fork 0
mirror of https://github.com/tavily-ai/tavily-mcp synced 2026-06-21 14:10:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: bump hono to 4.12.2 to resolve timing comparison vulnerability

Browse Source 
Resolves GHSA-gq3j-xvxp-8hrf (hono < 4.11.10 lacks timing-safe
comparison in basicAuth and bearerAuth middleware).

Lockfile-only change - hono is a transitive dependency via
@modelcontextprotocol/sdk.
This commit is contained in:
ParakhJaggi
2026-02-23 16:33:30 -05:00
parent 5ad911737d
commit 89981729f9
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package-lock.json
Generated
+3 -3
View File
@@ -849,9 +849,9 @@
}
},
"node_modules/hono": {
"version": "4.11.7",
"resolved": "https://registry.npmjs.org/hono/-/hono-4.11.7.tgz",
"integrity": "sha512-l7qMiNee7t82bH3SeyUCt9UF15EVmaBvsppY2zQtrbIhl/yzBTny+YUxsVjSjQ6gaqaeVtZmGocom8TzBlA4Yw==",
"version": "4.12.2",
"resolved": "https://registry.npmjs.org/hono/-/hono-4.12.2.tgz",
"integrity": "sha512-gJnaDHXKDayjt8ue0n8Gs0A007yKXj4Xzb8+cNjZeYsSzzwKc0Lr+OZgYwVfB0pHfUs17EPoLvrOsEaJ9mj+Tg==",
"license": "MIT",
"engines": {
"node": ">=16.9.0"