Skip to content
OpenAdvisories
High WID-SEC-2026-0933 9 CVEs

IBM App Connect Enterprise (Hono und Undici): Mehrere Schwachstellen

Published Mar 30, 2026 · Updated May 31, 2026 · Revision 4 · de-DE

Vendor: IBM Vendor: Red Hat Product: App Connect Enterprise Product: Enterprise Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere nicht näher bezeichnete Angriffe durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 9

  • High 7.5
    CVE-2026-1526

    undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

    The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression. When a WebSocket connection negotiates the permessage-deflate extension, the client decompresses incoming compres…

    undici undici langfuse-3-worker renovate Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-1528

    undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

    ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state, and throws a fatal TypeError that terminates the process. Patches Patched in …

    undici undici langfuse-3-worker renovate Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-2229

    undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

    ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of the server_max_window_bits parameter in the permessage-deflate extension. When a WebSocket client connects to a server, it automatically advertises sup…

    undici undici langfuse-3-worker renovate Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-29045

    Hono: Arbitrary file access via serveStatic vulnerability

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using serveStatic together with route-based middleware protections (e.g. app.use('/admin/*', ...)), inconsistent URL decoding allowed protected…

    honojs hono hono npm
  • Medium 6.5
    CVE-2026-1525

    undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

    Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length). This produces malformed HTTP/1.1 requests with multiple conflicting Content-Length values on the wire. Wh…

    undici undici langfuse-3-worker renovate Debian Ubuntu Wolfi npm
  • Medium 6.5
    CVE-2026-29085

    Hono: SSE Control Field Injection via CR/LF in writeSSE()

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using streamSSE() in Streaming Helper, the event, id, and retry fields were not validated for carriage return (\r) or newline (\n) characters. …

    honojs hono hono npm
  • Medium 5.9
    CVE-2026-2581

    undici is vulnerable to Unbounded Memory Consumption in in Undici's DeduplicationHandler via Response Buffering leads to DoS

    This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS). In vulnerable Undici versions, when interceptors.deduplicate() is enabled, response data for deduplicated requests could be accumulated in memory fo…

    undici undici renovate code-server Debian Ubuntu Wolfi npm
  • Medium 5.4
    CVE-2026-29086

    Hono: Cookie Attribute Injection via Unsanitized domain and path in setCookie()

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie() utility did not validate semicolons (;), carriage returns (\r), or newline characters (\n) in the domain and path options when const…

    honojs hono hono npm
  • Medium 4.6
    CVE-2026-1527

    undici is vulnerable to CRLF Injection via upgrade option

    ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary HTTP headers * Terminate the HTTP request prematurely and smuggle raw data to non-HTTP servic…

    undici undici langfuse-3-worker renovate Debian Ubuntu Wolfi npm

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates von Red Hat aufgenommen

  3. #2

    Neue Updates von IBM aufgenommen

  4. #1

    Initiale Fassung

References