diff --git a/.changeset/hono-security-update-4-13-7.md b/.changeset/hono-security-update-4-13-7.md
new file mode 100644
index 00000000000..a845151cc84
--- /dev/null
+++ b/.changeset/hono-security-update-4-13-7.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/integration/templates/hono-vite/package.json b/integration/templates/hono-vite/package.json
index 05c9a9d9a60..a7917e925d7 100644
--- a/integration/templates/hono-vite/package.json
+++ b/integration/templates/hono-vite/package.json
@@ -12,7 +12,7 @@
     "@hono/node-server": "^1.19.14",
     "dotenv": "^17.2.1",
     "express": "^5.1.0",
-    "hono": "^4.12.34",
+    "hono": "^4.13.7",
     "tsx": "^4.20.3",
     "vite-express": "^0.21.1"
   },
diff --git a/packages/hono/package.json b/packages/hono/package.json
index 1c2dd56b10e..d2850798161 100644
--- a/packages/hono/package.json
+++ b/packages/hono/package.json
@@ -78,7 +78,7 @@
     "@clerk/shared": "workspace:^"
   },
   "devDependencies": {
-    "hono": "^4.12.34"
+    "hono": "^4.13.7"
   },
   "peerDependencies": {
     "hono": ">=4"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2cc07e7eecb..aef5209befa 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -815,8 +815,8 @@ importers:
         version: link:../shared
     devDependencies:
       hono:
-        specifier: ^4.12.34
-        version: 4.13.4
+        specifier: ^4.13.7
+        version: 4.13.13
 
   packages/localizations:
     dependencies:
@@ -9888,8 +9888,8 @@ packages:
   hoist-non-react-statics@3.3.2:
     resolution: {integrity: sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==}
 
-  hono@4.13.4:
-    resolution: {integrity: sha512-AGEwKIyRMHRv1t8Wjwa3LHxQ61X5CqrdFT+4BRNTpqS5aJNnpl5WLjADb7vFlJzI/8uK7T5QLVApCMQKNa3LgQ==}
+  hono@4.13.13:
+    resolution: {integrity: sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==}
     engines: {node: '>=16.9.0'}
 
   hookable@5.5.3:
@@ -17876,9 +17876,9 @@ snapshots:
       '@hapi/hoek': 9.3.0
     optional: true
 
-  '@hono/node-server@1.19.14(hono@4.13.4)':
+  '@hono/node-server@1.19.14(hono@4.13.13)':
     dependencies:
-      hono: 4.13.4
+      hono: 4.13.13
 
   '@humanfs/core@0.19.1': {}
 
@@ -18436,7 +18436,7 @@ snapshots:
 
   '@modelcontextprotocol/sdk@1.30.1(@cfworker/json-schema@4.1.1)(zod@3.25.76)':
     dependencies:
-      '@hono/node-server': 1.19.14(hono@4.13.4)
+      '@hono/node-server': 1.19.14(hono@4.13.13)
       ajv: 8.20.0
       ajv-formats: 3.0.1(ajv@8.20.0)
       content-type: 1.0.5
@@ -18446,7 +18446,7 @@ snapshots:
       eventsource-parser: 3.0.8
       express: 5.2.1
       express-rate-limit: 8.3.2(express@5.2.1)
-      hono: 4.13.4
+      hono: 4.13.13
       jose: 6.2.2
       json-schema-typed: 8.0.2
       pkce-challenge: 5.0.1
@@ -26104,7 +26104,7 @@ snapshots:
     dependencies:
       react-is: 16.13.1
 
-  hono@4.13.4: {}
+  hono@4.13.13: {}
 
   hookable@5.5.3: {}