v4.13.6 v4.13.7

low risk

browser-use/video-useSep 4, 2026 → Sep 4, 20260 days between releases

What's New

Critical security release addressing XSS vulnerabilities in the Hono JSX library.

Bug Fixes

  • Fix for XSS vulnerability in JSX components (Suspense, ErrorBoundary, Provider)
  • Fix for unescaped plain strings in server rendering functions

Upgrade Notes

Users rendering untrusted strings should upgrade immediately to prevent XSS attacks. No configuration changes are required.

The Two Releases

v4.13.6

v4.13.6

Sep 4, 2026· 2 months ago

Improves client-side URL handling and type safety. Includes fixes for WebSocket URL normalization and allows symbol keys in Context type definitions.

Full release notes
v4.13.7

v4.13.7

Sep 4, 2026· 2 months ago

A critical security release addressing XSS vulnerabilities in the Hono JSX library. It fixes missing HTML escaping for untrusted strings within Suspense, ErrorBoundary, and Context.Provider components.

Full release notes