v4.13.6 v4.13.7
low risk
browser-use/video-useSep 4, 2026 → Sep 4, 20260 days between releases
What's New
Critical security release addressing XSS vulnerabilities in the Hono JSX library.
Bug Fixes
- Fix for XSS vulnerability in JSX components (Suspense, ErrorBoundary, Provider)
- Fix for unescaped plain strings in server rendering functions
Upgrade Notes
Users rendering untrusted strings should upgrade immediately to prevent XSS attacks. No configuration changes are required.
The Two Releases
v4.13.6
v4.13.6
Sep 4, 2026· 2 months ago
Improves client-side URL handling and type safety. Includes fixes for WebSocket URL normalization and allows symbol keys in Context type definitions.
Full release notesv4.13.7
v4.13.7
Sep 4, 2026· 2 months ago
A critical security release addressing XSS vulnerabilities in the Hono JSX library. It fixes missing HTML escaping for untrusted strings within Suspense, ErrorBoundary, and Context.Provider components.
Full release notes