CVE-2024-32652

CVE-2024-32652 is a denial-of-service vulnerability affecting the @hono/node-server adapter, which allows Hono applications to run on Node.js. Specifically, versions prior to 1.10.1 are susceptible to an application hang when processing malformed Host headers that cannot be parsed as a valid hostname. This vulnerability carries a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity, leading to a complete loss of availability for the affected application. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.