`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,097 Dependabot PRs

Latest PR:
about 12 hours ago

Unique Repositories:
1,647 repositories

Unique Repos (30 days):
170 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 4 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 17 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

2.0.1 → 2.0.2 Patch PR

Open 10 days ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates

reaatech/prompt-version-control #17

2.0.1 → 2.0.2 Patch PR

Closed 10 days ago 3 comments

chore(deps): bump the production-dependencies group with 13 updates

NumstackPtyLtd/supaproxy-server #113

1.19.14 → 2.0.2 Major PR

Open 11 days ago 1 comment

chore(deps): bump the production group across 1 directory with 52 updates

howarewoo/woo-stack #133

1.19.9 → 2.0.2 Major PR

Closed 11 days ago 2 comments

chore(deps)[api](deps): bump @hono/node-server from 1.19.14 to 2.0.2 in /apps/api

eric-sison/victory-apps #14

1.19.14 → 2.0.2 Major PR

Open 12 days ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 29 updates

kjfsm/notion-headless-cms #272

2.0.1 → 2.0.2 Patch PR

Closed 12 days ago 5 comments

chore(deps): Bump the npm_and_yarn group across 1 directory with 27 updates

fairspec/fairspec-application #13

1.19.9 → 1.19.13 Patch PR

Open 12 days ago 3 comments

Bump the npm_and_yarn group across 1 directory with 14 updates

stupidkubik/kanban-board-app #10

1.19.10 → 1.19.14 Patch PR

Open 12 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 9 updates

stefanteitge/rc-cloud #21

1.19.9 → 1.19.14 Patch PR

Closed 12 days ago 1 comment

deps-dev(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.14

bellbottomer2016-netizen/nk.stable_repair #12

1.19.11 → 1.19.14 Patch PR

Open 12 days ago 2 comments

chore(deps): bump the security-and-runtime group across 1 directory with 10 updates

haaofficail/nasaq #257

1.19.13 → 2.0.2 Major PR

Open 12 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

fat-fuzzy/rocks #996

1.19.9 → 1.19.14 Patch PR

Closed 13 days ago 2 comments

Bump the npm_and_yarn group across 2 directories with 7 updates

GlacierEQ/mcp-server #4

1.19.9 → 1.19.14 Patch PR

Open 13 days ago 2 comments

Bump the npm_and_yarn group across 5 directories with 10 updates

GlacierEQ/hyprnote #13

1.18.0 → 1.19.13 Minor PR

Open 13 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 13 updates

imrulo/ai #5

1.13.7 → 1.19.13 Minor PR

Open 13 days ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates

GlacierEQ/github-mcp-server #3

1.19.12 → 1.19.14 Patch PR

Open 13 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 8 updates

GlacierEQ/firecrawl-mcp-server #3

1.19.9 → 1.19.14 Patch PR

Open 13 days ago 1 comment

chore(deps-dev): Bump @hono/node-server from 1.19.9 to 1.19.14

kostasuser01gr/Kinsen-OPS #6

1.19.9 → 1.19.14 Patch PR

Open 13 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 10 updates

nikomatt69/nikcli #64

1.13.2 → 1.19.13 Minor PR

Closed 14 days ago 5 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 19 updates

fork-the-planet/agents #44

1.19.11 → 1.19.14 Patch PR

Closed 14 days ago 1 comment

Bump the production-minor group across 1 directory with 13 updates

haruki10041999/SALESFORCE-AI-COMPANY #12

2.0.1 → 2.0.2 Patch PR

Open 14 days ago 1 comment

Bump the all-dependencies group across 1 directory with 50 updates

amodalai/amodal #443

1.19.11 → 2.0.2 Major PR

Open 14 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 14 updates

charissystems/imara #27

1.19.9 → 2.0.2 Major PR

Closed 15 days ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates

draekien/portfolio #53

1.19.11 → 1.19.14 Patch PR

Open 15 days ago 1 comment

deps(deps): Bump the minor-and-patch group with 8 updates

agentc7/ac7 #39

2.0.1 → 2.0.2 Patch PR

Open 16 days ago 1 comment

Bump the hono group with 2 updates

ocque41/relay #5

1.19.14 → 2.0.2 Major PR

Open 16 days ago 1 comment

build(deps): Bump the all-deps group across 1 directory with 13 updates

teocomyn/commerce-agent-protocol #17

1.19.11 → 1.19.14 Patch PR

Open 16 days ago 2 comments

Bump the npm_and_yarn group across 3 directories with 11 updates

yesgou471/cloudflare-docs #4

1.19.12 → 1.19.14 Patch PR

Open 16 days ago 2 comments

Bump @hono/node-server from 2.0.1 to 2.0.2

Eternity714/rsshub #26

2.0.1 → 2.0.2 Patch PR

Open 16 days ago 2 comments

Bump @hono/node-server from 1.19.11 to 2.0.2

cjtcjtcjt2-star/my-rsshub #207

1.19.11 → 2.0.2 Major PR

Open 16 days ago 2 comments

build(deps): bump @hono/node-server from 1.19.11 to 2.0.2

wangrui1573/rsshub-koysobackup #186

1.19.11 → 2.0.2 Major PR

Closed 16 days ago 3 comments

Bump @hono/node-server from 1.19.11 to 2.0.2

rzrcazk/rsshub #183

1.19.11 → 2.0.2 Major PR

Open 16 days ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.2

tigerlaibao/rsshub #223

1.19.9 → 2.0.2 Major PR

Open 16 days ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.2

figured233/my-repository #281

1.19.9 → 2.0.2 Major PR

Open 16 days ago 2 comments

chore(deps): bump @hono/node-server from 1.19.7 to 2.0.2

catlincao/MYRSSHUB #447

1.19.7 → 2.0.2 Major PR

Open 16 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.4 to 2.0.2

zhanghailang123/rss-vercel #603

1.19.4 → 2.0.2 Major PR

Open 16 days ago 2 comments

chore(deps): bump @hono/node-server from 1.14.3 to 2.0.2

do-dorio/rsshub-comment2434 #1140

1.14.3 → 2.0.2 Major PR

Open 16 days ago 1 comment

chore(deps)(deps): bump the production-dependencies group with 3 updates

ribrewguy/openfga-node-server #12

2.0.0 → 2.0.2 Patch PR

Open 16 days ago 1 comment

Bump @hono/node-server from 1.19.10 to 1.19.14 in /frontend

Dargon789/mempool #169

1.19.10 → 1.19.14 Patch PR

Open 16 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 14 updates

sidereal-io/sidereal #126

1.19.13 → 2.0.2 Major PR

Open 16 days ago 1 comment

Bump @hono/node-server from 1.19.14 to 2.0.2 in /apps/backend

kea0811/microcrew #5

1.19.14 → 2.0.2 Major PR

Open 16 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 10 updates

EmilynnJ/windsurf-project2 #47

1.19.11 → 1.19.14 Patch PR

Open 16 days ago 15 comments

Bump @hono/node-server from 1.19.14 to 2.0.2 in /api

tonylam0/blue #2

1.19.14 → 2.0.2 Major PR

Open 17 days ago 1 comment

Bump @hono/node-server from 2.0.1 to 2.0.2

baktakt/rsshub #4

2.0.1 → 2.0.2 Patch PR

Open 17 days ago 2 comments

chore(deps): bump @hono/node-server from 2.0.0 to 2.0.2

sdk451/claude-gdrive #63

2.0.0 → 2.0.2 Patch PR

Closed 17 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

Sherlock999xxx/voltagent #77

1.18.2 → 1.19.13 Minor PR

Open 18 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 12 updates

groupthinking/EventRelay #184

1.19.11 → 1.19.14 Patch PR

Open 18 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 12 updates

witchinghourartcollective/hypersnap #1

1.14.1 → 1.19.14 Minor PR

Open 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

phoenixvc/retort #514

1.19.11 → 1.19.14 Patch PR

Open 18 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 16 updates

nosportugal/backstage-plugin-dev-ai-hub #19

1.19.11 → 1.19.14 Patch PR

Closed 18 days ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`