`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,097 Dependabot PRs

Latest PR:
about 20 hours ago

Unique Repositories:
1,647 repositories

Unique Repos (30 days):
170 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 5 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 1 day ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13

godsownf/remote-mcp-server-authless #11

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13 in /examples/servers/dog-facts

awslabs/run-model-context-protocol-servers-with-aws-lambda #1260

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

Ansvar-Systems/IAM-mcp #12

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13 in /web

Botshxlo/Payslip-Vault #18

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.10 to 1.19.13 in /frontend

awslabs/fullstack-solution-template-for-agentcore #85

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

blanktech23/kiptra-ai #11

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13

namehash/ensnode #1890

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13 in /booklore-ui

cdome/ollumi #16

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

build(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.13

Prequal-Digital/vscode #2576

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

David-Mawer/tabulator-angular-sample #21

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.10 to 1.19.13

Plerx2493/mads-v2-dashboard #28

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

feat(deps): bump @hono/node-server from 1.19.10 to 1.19.13

getsentry/sentry-javascript #20117

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

issdandavis/SCBE-AETHERMOORE #985

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

deps(npm): bump @hono/node-server from 1.19.11 to 1.19.13 in /dependencies

super-linter/super-linter #7720

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 5 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 6 updates

PostHog/posthog-js #3356

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

Ansvar-Systems/Public-sector-mcp #47

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13

FarDust/fardust-web #378

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.10 to 1.19.13

useshortcut/mcp-server-shortcut #195

1.19.10 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13

davidsalajan/backstage #803

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

Bump @hono/node-server from 1.19.10 to 1.19.13 in /frontend

TeckVeho/mitene #28

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13 in /backend/onyx/server/features/build/sandbox/kubernetes/docker/templates/outputs/web

onyx-dot-app/onyx #9985

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13

abiriadev/nodash #8

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 4 updates

jowikroon/hans-crafted-stories #38

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 17 directories with 11 updates

Hg1319/vscode #18

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13

Abhisheksinha1506/LandingPage #7

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

deps(deps): bump @hono/node-server from 1.19.11 to 1.19.13

truss44/mcp-crypto-price #156

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 11 directories with 3 updates

dporkka/mastra #1

1.19.6 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Build(deps): Bump @hono/node-server from 1.19.10 to 1.19.13

home-assistant/home-assistant.io #44574

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

Bump @hono/node-server from 1.19.10 to 1.19.13

ymm-oss/daigirin-2026 #75

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 5 comments

build(deps): bump @hono/node-server from 1.19.9 to 1.19.13

Takeru9016/portfolio #19

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): Bump @hono/node-server from 1.19.9 to 1.19.13 in /whatsapp-crm-frontend

morebnyemba/hanna #314

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.13

heddendorp/dashboard #21

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 16 updates

BAS-More/Ezra- #8

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.10 to 1.19.13

bervProject/my-personal-web-angular #667

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.13

yamap02/GAS-app-bestpractice #14

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Build(deps): Bump @hono/node-server from 1.19.9 to 1.19.13

analisaperlengkapan/mcp-jules #29

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.13

wevertonj/quiz-ordem-paranormal #17

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13 in /test/mcp

yeathtit/vscode #29

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

ivanoats/speed-and-position #135

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /mcp

arthrod/superagent #9

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

Ansvar-Systems/Automotive-MCP #50

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13 in /demo

statico/smui #9

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13 in /client

marcellourbani/vscode_abap_remote_fs #317

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps)(deps): bump @hono/node-server from 1.19.9 to 1.19.13

do-ops885/dermatology-goap-orchestrator #97

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 5 comments

⬆️ Bump @hono/node-server from 1.19.9 to 1.19.13

Rudrava/thefitnessapp #11

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

hugopalma17/webpilot #9

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

daawaan4x/pakamew #16

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.9 to 1.19.13

HerbCaudill/notebox #12

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13

adrannasystems/website #53

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`