v4.13.7 v1.4.6
low risk
smicallef/spiderfootSep 4, 2026 → Sep 5, 20260 days between releases
What's New
Older release patched critical XSS vulnerability; newer release notes lack code-level details.
Upgrade Notes
The newer release notes do not provide specific upgrade instructions or code changes. The older release addressed a critical XSS vulnerability in Hono's JSX components.
The Two Releases
v4.13.7
v4.13.7
Sep 4, 2026· 2 months ago
This release addresses a critical XSS vulnerability in Hono's JSX rendering components where untrusted strings were not properly escaped when used in Suspense, ErrorBoundary, or Context.Provider components.
Full release notesv1.4.6
Clypra v1.4.6
Sep 5, 2026· 2 months ago
Minimal release notes: "Automated multi-platform release bundle — macOS (arm64), Windows (x64), Linux (x64)."
Full release notes