HonoProduct update
Hono · v4.13.11
Hono v4.13.11 fixes a security issue in which serveStatic decoded an already-decoded path, so a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix (GHSA-5r4p-p66f-jhc7). Affected packages include hono/serve-static and the bun, deno and cloudflare-workers adapters built on it.
To serve files whose names contain a literal %, set allowPercentInPath: true.
Saved . A shortened excerpt from GitHub Releases; the original publisher retains authorship.