Starstruk Logo MarkStarstruk

v4.12.7

honojs/honov4.12.7Mar 10, 2026by yusukebe

AI Summary

This is a security hardening release that addresses a potential prototype pollution vulnerability. The fix ignores __proto__ path segments in parseBody when the dot option is enabled, preventing dangerous patterns when merged with unsafe inputs.

Key Highlights

  • Security fix: Ignore __proto__ path segments in parseBody({ dot: true }) to prevent prototype pollution

Full Release Notes

## Security hardening

Ignore `__proto__` path segments in parseBody({ dot: true }) to prevent potential prototype pollution when merged with unsafe patterns.

---

**Full Changelog**: https://github.com/honojs/hono/compare/v4.12.6...v4.12.7