v4.13.7 v4.13.6
honojs/honoSep 4, 2026 → Sep 4, 20260 days between releases
Generating AI comparison
Analyzing what changed between v4.13.7 and v4.13.6. This page updates automatically — usually within a minute.
The Two Releases
v4.13.7
Sep 4, 2026· 2 months ago
This release addresses a critical XSS vulnerability in the `hono/jsx` library where plain strings were rendered unescaped in boundary components and server rendering functions. The update ensures proper HTML escaping for untrusted data within Suspense, ErrorBoundary, Context.Provider, and related server-side rendering methods.
Full release notesv4.13.6
Sep 4, 2026· 2 months ago
This release focuses on bug fixes and internal improvements. It addresses issues with URL parameter handling in client methods, normalizes WebSocket root URLs, and improves type safety for symbol keys in the Context object. Additionally, it refactors handler iteration logic for consistency.
Full release notes