`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,104 Dependabot PRs

Latest PR:
about 15 hours ago

Unique Repositories:
1,649 repositories

Unique Repos (30 days):
166 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 6 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server cannot handle "double dots" in URL

GHSA-rjq5-w47x-x359 CVE-2024-23340 MODERATE published over 2 years ago • updated 7 minutes ago

### Impact Since v1.3.0, we use our own Request object. This is great, but the `url` behavior is unexpected. In the standard API, if the URL cont...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 7 minutes ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 8 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

bartholomej/node-csfd-api #128

1.19.9 → 1.19.11 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 7 updates

orpaynter/UI-TARS-desktop #35

1.19.3 → 1.19.10 Patch PR

Open 2 months ago 2 comments

chore(deps): Bump the npm_and_yarn group across 1 directory with 5 updates

williamzujkowski/strudel-mcp-server #92

1.19.9 → 1.19.11 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 9 updates

cenanimutlu/UI-TARS-desktop #26

1.19.3 → 1.19.10 Patch PR

Closed 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.11 in /DatingApp-SPA

AshishKhatiwada2/DatingApp #57

1.19.9 → 1.19.11 Patch PR

Closed 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.9 to 1.19.11

DimiMikadze/orca #224

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates

jscraik/zSearch #5

1.19.7 → 1.19.11 Patch PR

Closed 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 6 updates

truffle-ai/dexto #656

1.19.5 → 1.19.10 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

AnalineS/roteirosdedispersacao #430

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 14 directories with 13 updates

asperpharma/supabase #27

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 5 updates

jscraik/mKit #7

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 4 updates

corespeed-io/ag0-template-video-agent #6

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 10 directories with 5 updates

MyMindVentures/MCP_Servers #6

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 4 updates

billlzzz18/bl1nk-skill-platform #54

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 17 directories with 13 updates

Kaairofelipe/supabase #17

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 16 directories with 11 updates

AndrewDongminYoo/openapi-generator #60

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 5 updates

Rajaonarison-Andry-Misandratra-Fiderana/m1p13mean-RAJAONARISON-Andry-Misandratra-Fiderana #7

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

Mostafa-SAID7/M.S.Said #20

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.11

f/devtap #4

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.11 in /Frontend/FrontendResources

itShion/ITSCompanyPW #75

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 5 updates

kubb-labs/kubb #2737

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates

preechapon250/genkit #44

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump @hono/node-server from 1.19.7 to 1.19.11

kristentr/expo #32

1.19.7 → 1.19.11 Patch PR

Open 3 months ago 3 comments

Bump @hono/node-server from 1.19.7 to 1.19.11

Ibu754/expo #1

1.19.7 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

build(deps): Bump the production group across 1 directory with 42 updates

GLINCKER/glinr-task-manager #41

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

AKJUS/RSSHub #806

1.19.9 → 1.19.10 Patch PR

Open 3 months ago 4 comments

Bump the production-deps group with 8 updates

glenihenacho/a2a4a #23

1.19.10 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 22 directories with 7 updates

Kbro1989/cloudflare-code-agent #11

1.19.7 → 1.19.11 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 5 updates

nrasslimy/openai-agents-js #10

1.19.7 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

deps(deps): bump @hono/node-server from 1.19.9 to 1.19.11

VibeTensor/vibemcp #36

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 4 comments

Bump the npm_and_yarn group across 2 directories with 15 updates

AKJUS/ag-grid #421

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.11

jimzijun/yizijun-site #50

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 70 directories with 7 updates

preechapon250/intellij-plugins #59

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates

Jkker/dokploy #12

1.19.9 → 1.19.10 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates

zapabob/codex #106

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 5 updates

truffle-ai/dexto #647

1.19.5 → 1.19.10 Patch PR

Closed 3 months ago 2 comments

build(deps-dev): bump @hono/node-server from 1.19.9 to 1.19.11

rhlowery/unity-catalog-access-request-ui #10

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

specialized806/vscod3 #1312

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 7 updates

specialized806/vscod3 #1311

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.9 to 1.19.11 in /libs/cuabot

trycua/cua #1156

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 6 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 5 updates

gamblecodezcom/Gamblecodez-Dot-Com #141

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates

acedergren/oci-self-service-portal #19

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 5 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

billlzzz10/hyprnote #23

1.19.9 → 1.19.10 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the dependencies group across 3 directories with 24 updates

Qnurye/qnuryes #202

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 5 updates

kubb-labs/kubb #2716

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates

acedergren/oci-self-service-portal #17

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 6 comments

Bump the npm_and_yarn group across 1 directory with 4 updates

corespeed-io/ag0-template-video-agent #5

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 4 updates

Rajaonarison-Andry-Misandratra-Fiderana/m1p13mean-RAJAONARISON-Andry-Misandratra-Fiderana #6

1.19.9 → 1.19.11 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

shirishpothi/PagePalette #26

1.19.7 → 1.19.11 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

AnalineS/roteirosdedispersacao #425

1.19.9 → 1.19.11 Patch PR

Open 3 months ago 2 comments

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,960 (47.8%)

Merged 220 (5.4%)

Closed 1,704 (41.5%)

PR Types

Major 108 (2.6%)

Minor 1,404 (34.2%)

Patch 2,372 (57.8%)