要点だけを先に読めるように短く再構成したセクションです。
元記事Quick Digest
要点だけを先に読めるように短く再構成したセクションです。
Key Points
この記事は 2026-06-23 に公開された「v4.12.27」の内容を日本語で簡潔にまとめたものです。
Full Translation
原文の流れを保ったまま読める翻訳セクションです。
v4.12.27（原文タイトル）
公開日: 2026-06-23 翻訳生成に失敗したため、原文をそのまま保存しています。
honojs / hono Public Uh oh! There was an error while loading. Please reload this page . Notifications You must be signed in to change notification settings Fork 1.1k Star 31.1k Code Issues 265 Pull requests 105 Discussions Actions Security and quality 43 Insights Additional navigation options Code Issues Pull requests Discussions Actions Security and quality Insights Releases v4.12.27 v4.12.27 Latest Latest Compare Choose a tag to compare Sorry, something went wrong. Filter Loading Sorry, something went wrong. Uh oh! There was an error while loading. Please reload this page . No results found View all tags yusukebe released this 23 Jun 02:51 v4.12.27 97c6fe1 Security fixes This release includes fixes for the following security issues: hono/jsx does not isolate context per request Affects: hono/jsx , hono/jsx-renderer . During SSR, context was stored process-wide instead of per request, so useContext() / useRequestContext() read after an await in an async component could return another concurrent request's value — leading to cross-request data disclosure or authorization checks against the wrong request. GHSA-hvrm-45r6-mjfj Server-Side XSS via JSX escaping bypass in cx() Affects: hono/css . cx() marked its composed class name as already-escaped without escaping the input, so untrusted input passed as a class name could break out of the JSX class attribute during SSR and inject markup (XSS). GHSA-w62v-xxxg-mg59 API Gateway v1 adapter can drop a repeated request header value Affects: hono/aws-lambda . The API Gateway v1 (and VPC Lattice) adapter de-duplicated repeated header values by substring instead of exact match, dropping a value that is a substring of another (e.g. 203.0.113.1 dropped when 203.0.113.10 is present) — affecting logic such as X-Forwarded-For -based IP restriction. GHSA-xgm2-5f3f-mvvc Users of hono/jsx / hono/jsx-renderer , hono/css ( cx() ), or the hono/aws-lambda API Gateway v1 / VPC Lattice adapters are encouraged to upgrade. Assets 2 Loading Uh oh! There was an error while loading. Please reload this page . --> ❤️ 1 sant123 reacted with heart emoji 🚀 1 sant123 reacted with rocket emoji All reactions ❤️ 1 reaction 🚀 1 reaction 1 person reacted