Starstruk Logo MarkStarstruk

v4.12.2

honojs/honov4.12.2Feb 23, 2026by yusukebe

AI Summary

A security fix release addressing a critical vulnerability in the AWS Lambda adapter. Fixed incorrect handling of X-Forwarded-For behind ALB that could allow IP-based access control bypass.

Key Highlights

  • Security fix for X-Forwarded-For handling vulnerability (GHSA-xh87-mx6m-69f3)
  • Fixed IP-based access control bypass in AWS Lambda adapter behind ALB
  • Reverted PR #4707

New Features

  • Security vulnerability fix for X-Forwarded-For header handling

Full Release Notes

## Security fix

Fixed incorrect handling of `X-Forwarded-For` in the AWS Lambda adapter behind ALB that could allow IP-based access control bypass. The detail: https://github.com/honojs/hono/security/advisories/GHSA-xh87-mx6m-69f3

Thanks @EdamAme-x 

## What's Changed

* fix(context): revert PR #4707 by @yusukebe in https://github.com/honojs/hono/pull/4757

**Full Changelog**: https://github.com/honojs/hono/compare/v4.12.1...v4.12.2