`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,104 Dependabot PRs

Latest PR:
about 9 hours ago

Unique Repositories:
1,649 repositories

Unique Repos (30 days):
166 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 5 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 1 day ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 8 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 3 comments

Bump @hono/node-server from 1.19.11 to 1.19.12

fuwaffu/rsshub_x #83

1.19.11 → 1.19.12 Patch PR

Open about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.19.11 to 1.19.12

wangrui1573/rsshub-koysobackup #62

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 3 comments

Bump @hono/node-server from 1.19.11 to 1.19.12

mazige1997/rsshub #82

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.7 to 1.19.12

Shayne0804-bit/rssh #258

1.19.7 → 1.19.12 Patch PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.9 to 1.19.12

NIGHTSW0RD/nightsword-rss #246

1.19.9 → 1.19.12 Patch PR

Closed about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.19.9 to 1.19.12

LuigiAPCPereira/RSSHub #360

1.19.9 → 1.19.12 Patch PR

Closed about 2 months ago 4 comments

Bump @hono/node-server from 1.19.9 to 1.19.12

tututuhehehe/rsshubone #213

1.19.9 → 1.19.12 Patch PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.9 to 1.19.12

ZHOUmengmen/rsshub #259

1.19.9 → 1.19.12 Patch PR

Closed about 2 months ago 3 comments

Bump @hono/node-server from 1.19.9 to 1.19.12

Egbad/rsshub #265

1.19.9 → 1.19.12 Patch PR

Open about 2 months ago 2 comments

Bump @hono/node-server from 1.19.9 to 1.19.12

yuseng505/myrss #253

1.19.9 → 1.19.12 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.4 to 1.19.12

zhanghailang123/rss-vercel #477

1.19.4 → 1.19.12 Patch PR

Closed about 2 months ago 4 comments

build(deps): Bump the minor-and-patch group across 1 directory with 10 updates

mission69b/t2000 #31

1.19.11 → 1.19.12 Patch PR

Open about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.19.11 to 1.19.12

wopr-network/wopr-platform #859

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.12

nekofar/farcaster-frames-template #912

1.19.9 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

Bump the prod-deps group across 1 directory with 5 updates

SimplyLiz/DeviceRouter #51

1.19.9 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the all group with 21 updates

nihalgonsalves/expenses #352

1.19.11 → 1.19.12 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the minor-and-patch group across 1 directory with 16 updates

vana-com/personal-server #61

1.19.9 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.6 to 1.19.12

WonderMew/pt-gen-universal #41

1.19.6 → 1.19.12 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.6 to 1.19.12

phyohu/pt-gen-universal #45

1.19.6 → 1.19.12 Patch PR

Open about 2 months ago 2 comments

Bump the production-deps group across 1 directory with 10 updates

glenihenacho/a2a4a #88

1.19.10 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 12 updates

department-of-veterans-affairs/component-library #2058

1.19.9 → 1.19.12 Patch PR

Open about 2 months ago 6 comments

chore(deps): Bump the minor-and-patch group across 1 directory with 11 updates

idimetrix/prometheus-ai #11

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

chore(deps): Bump the production-dependencies group with 3 updates

hottim900/sparkle #271

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.12

napple-team/koresuki-support #189

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

chore(dependabot): (deps): bump the all-dependencies group with 19 updates

DNUM-SocialGouv/sirena #1149

1.19.11 → 1.19.12 Patch PR

Open about 2 months ago 1 comment

build(deps): Bump the minor-and-patch group across 1 directory with 7 updates

mission69b/t2000 #28

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 3 comments

chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates

sunweijieMJ/aix #53

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.12

yoda-digital/iris-gateway #301

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.19.9 to 1.19.11 in the npm_and_yarn group across 1 directory

RomaricMourgues/humanlogs.app #1

1.19.9 → 1.19.11 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 11 updates

objectstack-ai/objectos #314

1.19.9 → 1.19.11 Patch PR

Open about 2 months ago 3 comments

chore(deps)(deps): bump the production-dependencies group across 1 directory with 54 updates

sunweijieMJ/aix #48

1.19.9 → 1.19.11 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the all-minor-patch group across 1 directory with 25 updates

2328760190/zenith-image-generator-c6bd3 #12

1.19.7 → 1.19.11 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the all-minor-patch group across 1 directory with 24 updates

WuMingDao/zenith-image-generator #87

1.19.9 → 1.19.11 Patch PR

Closed about 2 months ago 5 comments

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates

jhipster/generator-jhipster-quarkus #598

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 2 comments

Bump @hono/node-server from 1.19.6 to 1.19.11

hao6vcom-cloud/pt-gen-universal #7

1.19.6 → 1.19.11 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 20 updates

infrareactive/cal.com #2

1.19.9 → 1.19.11 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 28 updates

afterall1/icerik #8

1.19.9 → 1.19.11 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 5 updates

kubb-labs/kubb #2927

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 11 updates

Eng-Anetac/nifi #700

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

danielbodnar/sandbox-agent #4

1.19.9 → 1.19.10 Patch PR

Open 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 9 updates

google/nomulus #2989

1.19.9 → 1.19.11 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates

khill1269/servalsheets #49

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates

orpaynter/UI-TARS-desktop #40

1.19.3 → 1.19.10 Patch PR

Closed 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates

cenanimutlu/UI-TARS-desktop #32

1.19.3 → 1.19.10 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 5 updates

Nick2bad4u/Uptime-Watcher #167

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 10 comments

Bump the npm_and_yarn group across 1 directory with 6 updates

hey-aw/awzone-field-journal #1

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.11

CDCgov/MicrobeTrace #1030

1.19.9 → 1.19.11 Patch PR

Closed 2 months ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.11

nvanexan/cl-plugin-test #3

1.19.9 → 1.19.11 Patch PR

Closed 2 months ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 30 updates

sunweijieMJ/aix #45

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 2 comments

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,960 (47.8%)

Merged 220 (5.4%)

Closed 1,704 (41.5%)

PR Types

Major 108 (2.6%)

Minor 1,404 (34.2%)

Patch 2,372 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`