`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,099 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
1,648 repositories

Unique Repos (30 days):
163 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 5 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 1 day ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13

adrannasystems/website #53

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /deploy/runtime

mnemom/mnemom-platform #122

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

imoli-pl/efl-leasing-docs #32

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

deps(deps): bump @hono/node-server from 1.19.9 to 1.19.13

VibeTensor/vibemcp #56

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

build(deps-dev): Bump @hono/node-server from 1.19.9 to 1.19.13

gchariot/tcg-card #11

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

rars/ngx-diff #143

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

Vijay-Duke/mcp-atlassian #110

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 5 comments

Bump @hono/node-server from 1.19.9 to 1.19.13

systelab/systelab-components #1155

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13

WeebleWobb/baseball-fantasy-tool #60

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

italia/api-oas-checker #780

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

chrispaskvan/destiny-ghost-api #593

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /api

clawbuild/clawbuild #12

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 3 comments

build(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.13

arapgechina24-lgtm/nctirs-platform-v2 #59

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

puristajs/purista #268

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

deps: bump @hono/node-server from 1.19.7 to 1.19.13

CrazyDubya/genMail #60

1.19.7 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

donshammah96/build-market #38

1.19.10 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /libs/cuabot

trycua/cua #1279

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 6 comments

chore(deps)(deps): bump @hono/node-server from 1.19.7 to 1.19.13

alternatefutures/service-auth #102

1.19.7 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

ymm-oss/daigirin-template #309

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 5 comments

Bump @hono/node-server from 1.19.9 to 1.19.13

sayedsamin/veriloop #5

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 7 updates

PostHog/posthog-js #3354

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

Bump @hono/node-server from 1.19.9 to 1.19.13

brampeirs/baby-poll #22

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /antora-ui-camel

apache/camel-website #1566

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): Bump @hono/node-server from 1.19.9 to 1.19.13

fourjuaneight/query #7

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.13 in /Angular/sol3-web

KeithBarrows/sandbox #109

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

BrandonStudio/SearXNG-MCP #14

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.6 to 1.19.13

liornizry/Managed-tasks #13

1.19.6 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.13

karcagtamas/Angular-MineSweeper #71

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.7 to 1.19.13

mraza007/blog #33

1.19.7 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): Bump @hono/node-server from 1.19.9 to 1.19.13

chrisjwalk/angular-cli-netcore-ngrx-starter #113

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /Site/astro-koharu/cms

dupouyer/BlogPublish #63

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.6 to 1.19.13

arthrod/hyprnote #3

1.19.6 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

NtskwK/RSSHUB #10

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

chore(deps): Bump @hono/node-server from 1.19.5 to 1.19.13

eldtechnologies/conduit #45

1.19.5 → 1.19.13 Patch PR

Closed about 2 months ago 3 comments

build(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /backend

ralvescosta/ada-tech-challenge #91

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.7 to 1.19.13

semba-yui/semba-yui #35

1.19.7 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

drvova/discord-mcp #22

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.8 to 1.19.13 in /hot-news

arthrod/Revornix #5

1.19.8 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.9 to 1.19.13 in /ui

Sherlock999xxx/github-mcp-server #12

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.19.9 to 1.19.13

contentful/contentful-mcp-server #354

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Build(deps): Bump @hono/node-server from 1.19.8 to 1.19.13 in /apps/web

deepthinklabs-ai/ai-ui-wrapper #127

1.19.8 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.0 to 1.19.13

neondatabase/psqlsh #46

1.19.0 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

ringcentral/ringcentral-js-widgets #1809

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.13

dev-bcn/dev-bcn.github.io #895

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.13 in /test/angular-echarts

Orange-OpenSource/ods-charts #1010

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.7 to 1.19.13 in /dependencies

Dustin4444/super-linter #21

1.19.7 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.8 to 1.19.13

canstralian/Sentinel-Copilot #35

1.19.8 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.5 to 1.19.13

StarNumber12046/catapi-vercel #8

1.19.5 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.7 to 1.19.13 in /mcp_servers/fetch_toolathlon

Klavis-AI/klavis #1479

1.19.7 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`