`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,093 Dependabot PRs

Latest PR:
about 15 hours ago

Unique Repositories:
1,645 repositories

Unique Repos (30 days):
173 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 3 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 5 days ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 5 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.11 → 2.0.4 Major PR

Open about 15 hours ago 1 comment

Bump @hono/node-server from 1.19.13 to 2.0.4

xiaomoofficial/123 #135

1.19.13 → 2.0.4 Major PR

Open about 15 hours ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.4

tigerlaibao/rsshub #254

1.19.9 → 2.0.4 Major PR

Open about 15 hours ago 2 comments

chore(deps): bump @hono/node-server from 1.18.1 to 2.0.4

mengx8/RSSHub #1060

1.18.1 → 2.0.4 Major PR

Open about 15 hours ago 1 comment

chore(deps): bump the runtime-dependencies group with 3 updates

fyodoriv/minsky #844

2.0.3 → 2.0.4 Patch PR

Open about 18 hours ago 1 comment

chore(deps): bump the hono group across 1 directory with 3 updates

pbechliv/kava-now #6

2.0.2 → 2.0.4 Patch PR

Open about 22 hours ago 1 comment

build(deps): bump the security-and-runtime group with 7 updates

haaofficail/nasaq #350

1.19.13 → 2.0.4 Major PR

Open 1 day ago 1 comment

deps: bump the production-dependencies group across 1 directory with 55 updates

GeorgeMwiki/BOSSNYUMBA101 #161

1.19.13 → 2.0.4 Major PR

Open 1 day ago 1 comment

chore(deps): bump the production-dependencies group with 4 updates

xconics-dev/proptryx-server #67

2.0.3 → 2.0.4 Patch PR

Open 1 day ago 1 comment

chore(deps): bump @hono/node-server from 2.0.3 to 2.0.4

CaoMeiYouRen/hono-template #1205

2.0.3 → 2.0.4 Patch PR

Closed 1 day ago 2 comments

chore(deps): bump the npm-all group with 67 updates

MatHoyer/hypertube #217

1.16.0 → 2.0.4 Major PR

Closed 1 day ago 1 comment

build(deps): bump the runtime-dependencies group across 1 directory with 13 updates

Thalermark/thalermark #93

2.0.3 → 2.0.4 Patch PR

Closed 1 day ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

GlacierEQ/langgraph #9

1.17.1 → 1.19.14 Minor PR

Open 2 days ago 4 comments

build(deps): bump the npm_and_yarn group across 2 directories with 8 updates

pvnarp/membervault #1

1.19.11 → 1.19.13 Patch PR

Closed 2 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates

nikomatt69/nikcli #78

1.13.2 → 1.19.13 Minor PR

Closed 2 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 8 directories with 22 updates

michaelhughes2501/ruflo #8

1.19.9 → 1.19.14 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates

Kaairofelipe/playwright #3

1.19.11 → 1.19.14 Patch PR

Open 3 days ago 9 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates

GlacierEQ/langgraphjs #10

1.14.4 → 1.19.13 Minor PR

Open 3 days ago 4 comments

chore(deps): bump the dependencies group with 32 updates

tekbreed/tekmemo #13

1.19.14 → 2.0.3 Major PR

Open 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 17 updates

AlDracuX/RuVector #5

1.19.9 → 1.19.14 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates

fairspec/fairspec-application #15

1.19.9 → 1.19.13 Patch PR

Open 3 days ago 2 comments

deps: bump the production-dependencies group across 1 directory with 54 updates

GeorgeMwiki/BOSSNYUMBA101 #159

1.19.13 → 2.0.3 Major PR

Open 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 22 updates

michaelhughes2501/ruflo #4

1.19.9 → 1.19.14 Patch PR

Closed 3 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 10 updates

4xiaxia/claude-flow #6

1.19.7 → 1.19.14 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

GlacierEQ/mcp-playwright #5

1.19.9 → 1.19.14 Patch PR

Open 3 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates

stvn101/typescript-sdk #1

1.19.11 → 1.19.13 Patch PR

Open 3 days ago 2 comments

deps: bump the npm-security-and-patches group with 15 updates

decantr-ai/decantr #108

2.0.2 → 2.0.3 Patch PR

Open 4 days ago 1 comment

build(deps): Bump the minor-and-patch group across 1 directory with 33 updates

mission69b/t2000 #86

1.19.11 → 1.19.14 Patch PR

Open 4 days ago 2 comments

chore(deps): bump the npm-security-updates group across 1 directory with 11 updates

servrox-solutions/panana-predictions #87

1.13.2 → 1.19.14 Minor PR

Open 5 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 7 updates

renart-data/renart #15

1.19.11 → 1.19.14 Patch PR

Closed 5 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates

nikomatt69/nikcli #68

1.13.2 → 1.19.13 Minor PR

Closed 5 days ago 4 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.3

omkmorendha/mcp-authkit #118

1.19.14 → 2.0.3 Major PR

Closed 6 days ago 3 comments

Bump @hono/node-server from 2.0.2 to 2.0.3

Ibrahim170396/tes #19

2.0.2 → 2.0.3 Patch PR

Open 6 days ago 2 comments

chore: Bump the npm_and_yarn group across 1 directory with 14 updates

facioquo/stock-charts #478

1.19.9 → 1.19.14 Patch PR

Closed 7 days ago 3 comments

deps(gateway): bump @hono/node-server from 1.19.11 to 2.0.3 in /gateway

TentaCLAW-OS/TentaCLAW #59

1.19.11 → 2.0.3 Major PR

Open 7 days ago 3 comments

build(deps): Bump the all-deps group across 1 directory with 14 updates

teocomyn/commerce-agent-protocol #18

1.19.11 → 1.19.14 Patch PR

Closed 7 days ago 3 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14

gengjiawen/sass-template #31

1.19.11 → 1.19.14 Patch PR

Closed 7 days ago 2 comments

chore(deps)(deps): bump the production-dependencies group across 1 directory with 34 updates

objectstack-ai/framework #1249

2.0.2 → 2.0.3 Patch PR

Open 7 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.3 in /apps/auth

JasonTM17/Leetrank_Project #16

1.19.14 → 2.0.3 Major PR

Closed 7 days ago 3 comments

Bump @hono/node-server from 2.0.2 to 2.0.3

Qarzi-man/rsshub-news #18

2.0.2 → 2.0.3 Patch PR

Closed 8 days ago 3 comments

Bump @hono/node-server from 2.0.1 to 2.0.3

Jasonhonghh/rsshub1 #62

2.0.1 → 2.0.3 Patch PR

Open 8 days ago 2 comments

Bump @hono/node-server from 1.19.13 to 2.0.3

xiaomoofficial/123 #121

1.19.13 → 2.0.3 Major PR

Closed 8 days ago 3 comments

chore(deps): bump @hono/node-server from 1.19.4 to 2.0.3

zhanghailang123/rss-vercel #619

1.19.4 → 2.0.3 Major PR

Closed 8 days ago 3 comments

chore(deps): bump the workspace-dependencies group across 1 directory with 31 updates

hb-dragons/dragons-hub #40

1.19.14 → 2.0.2 Major PR

Closed 8 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 20 updates

Cam-Smith-One/Headless_CRM #7

1.19.11 → 2.0.3 Major PR

Open 8 days ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 22 updates

kubotama/bookmark-page #558

2.0.1 → 2.0.2 Patch PR

Closed 8 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14

Enflame-Media/Magic-Agent #198

1.19.11 → 1.19.14 Patch PR

Closed 8 days ago 2 comments

chore(deps): bump the all group in /apps/worker with 5 updates

yourhq/yourhq #46

2.0.1 → 2.0.2 Patch PR

Open 8 days ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates

reaatech/prompt-version-control #17

2.0.1 → 2.0.2 Patch PR

Closed 8 days ago 3 comments

chore(deps): bump the production-dependencies group with 13 updates

NumstackPtyLtd/supaproxy-server #113

1.19.14 → 2.0.2 Major PR

Open 9 days ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,955 (47.8%)

Merged 220 (5.4%)

Closed 1,698 (41.5%)

PR Types

Major 106 (2.6%)

Patch 2,363 (57.7%)

Minor 1,404 (34.3%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`