An open index of dependabot pull requests across open source projects.

@hono/node-server

Ecosystem:
npm
Package URL:
pkg:npm/@hono/node-server
Total PRs:
4,218 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
1,717 repositories
Unique Repos (30 days):
23 repositories
Security Advisories
Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
GHSA-frvp-7c67-39w9 MODERATE published 9 days ago • updated 5 days ago
The same as the `hono` core [Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)](https://github.com/honojs/hono/security/adv...
@hono/node-server cannot handle "double dots" in URL
GHSA-rjq5-w47x-x359 CVE-2024-23340 MODERATE published over 2 years ago • updated 4 days ago
### Impact Since v1.3.0, we use our own Request object. This is great, but the `url` behavior is unexpected. In the standard API, if the URL cont...
@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware
GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 5 months ago • updated 4 days ago
## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...
@hono/node-server: Middleware bypass via repeated slashes in serveStatic
GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published 4 months ago • updated 4 days ago
## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...
Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake
GHSA-9mqv-5hh9-4cgg MODERATE published 9 days ago • updated 5 days ago
## Summary A WebSocket upgrade request to an `upgradeWebSocket` route with a missing or malformed `Sec-WebSocket-Key` header leaks memory permanen...
Recent PRs
Package Details
Name: @hono/node-server
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@hono/node-server
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 2
MODERATE 4
View All npm Advisories
Package Information
Description:

Node.js Adapter for Hono

Repository: https://github.com/honojs/node-server
Homepage: https://github.com/honojs/node-server
Latest Release: 1.14.4
about 1 year ago
Dependent Repos: 34
Dependent Packages: 4
Downloads: 1,870,953
Ranking: Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs
PR Status
Open 2,026 (48.0%)
Merged 220 (5.2%)
Closed 1,752 (41.5%)
PR Types
Major 129 (3.1%)
Minor 1,410 (33.4%)
Patch 2,459 (58.3%)