Add Hono CORS fixed release references

[cookesan]

Adds Hono CORS fixed release references to GHSA-88fw-hqm2-52qc.

Audit refresh, July 8, 2026:

• Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
• Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-88fw-hqm2-52qc/GHSA-88fw-hqm2-52qc.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
• Revalidated the added public references and package-version evidence in the diff; all resolve through their source site or registry.

[cookesan]

Maintainer audit: this only expands the reference set for the Hono CORS advisory. Release tag v4.12.25 resolves, npm version hono 4.12.25 resolves, and CVE-2026-54290 is present in NVD. The advisory JSON parses, the committed diff passes git diff --check, the PR is merge-clean, and advisory processing is successful. No package, affected range, severity, or database metadata is changed.

[advisory-database]

Hi @cookesan! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!