`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,128 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
1,665 repositories

Unique Repos (30 days):
141 repositories

Security Advisories

@hono/node-server cannot handle "double dots" in URL

GHSA-rjq5-w47x-x359 CVE-2024-23340 MODERATE published over 2 years ago • updated 7 days ago

### Impact Since v1.3.0, we use our own Request object. This is great, but the `url` behavior is unexpected. In the standard API, if the URL cont...

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated about 1 hour ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 7 days ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 14 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

Recent PRs (filtered by: Minor PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 36 directories with 5 updates

GlacierEQ/CopilotKit #152

1.13.8 → 1.19.13 Minor PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

Sherlock999xxx/voltagent #60

1.18.2 → 1.19.13 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 13 directories with 6 updates

jadenblack/composio #73

1.12.2 → 1.19.13 Minor PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 4 directories with 7 updates

c6ai/vercel-ai #6

1.13.7 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 4 updates

idgrou/composio #262

1.13.2 → 1.19.13 Minor PR

Closed about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 21 directories with 8 updates

paulpham157/composio #67

1.13.2 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 36 directories with 5 updates

solutelabs/CopilotKit-demo #145

1.13.8 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.18.2 to 1.19.13

arthrod/voltagent #4

1.18.2 → 1.19.13 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.16.0 to 1.19.13

arthrod/penx #10

1.16.0 → 1.19.13 Minor PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.18.2 to 1.19.13

Vancouver-KDD/kdd-discord #11

1.18.2 → 1.19.13 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.13.7 to 1.19.13 in /cdn-server

lunacare/cosmo #87

1.13.7 → 1.19.13 Minor PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.13.8 to 1.19.13

farcasterxyz/miniapps #587

1.13.8 → 1.19.13 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.13.7 to 1.19.13

OpenPhone/cosmo #84

1.13.7 → 1.19.13 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.13.7 to 1.19.13 in /examples/auth/hono

muffy86/supabase #63

1.13.7 → 1.19.13 Minor PR

Open about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.13.7 to 1.19.13

lunacare/cosmo #85

1.13.7 → 1.19.13 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.14.0 to 1.19.13

alialobidm/ecosystem #11

1.14.0 → 1.19.13 Minor PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.8.2 to 1.19.13

aramb-dev/arabic-vocab-api #7

1.8.2 → 1.19.13 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.13.7 to 1.19.13 in /examples/hono

muffy86/ai-vercel1 #10

1.13.7 → 1.19.13 Minor PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

Sherlock999xxx/voltagent #59

1.18.2 → 1.19.10 Minor PR

Closed about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.14.3 to 1.19.13

do-dorio/rsshub-comment2434 #1013

1.14.3 → 1.19.13 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

tcubed-group/vercel-ai-sdk #7

1.13.7 → 1.19.10 Minor PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.12.0 to 1.19.12

amynaff/my-lunar-phase #18

1.12.0 → 1.19.12 Minor PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 9 updates

trizist/x402 #30

1.14.1 → 1.19.10 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 16 updates

AKJUS/privatefolio #53

1.13.8 → 1.19.12 Minor PR

Open 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.12.0 to 1.19.12

backnero/RSSHub #1738

1.12.0 → 1.19.12 Minor PR

Open 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.14.3 to 1.19.12

do-dorio/rsshub-comment2434 #985

1.14.3 → 1.19.12 Minor PR

Closed 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.14.3 to 1.19.12

do-dorio/comment2434-2 #838

1.14.3 → 1.19.12 Minor PR

Closed 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.13.8 to 1.19.12

pingjie/RSSHub #4434

1.13.8 → 1.19.12 Minor PR

Closed 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

dporkka/dokploy-paas #1

1.14.3 → 1.19.10 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates

dporkka/langgraphjs #1

1.14.4 → 1.19.10 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 4 updates

khulnasoft/ai-toolkit #16

1.13.7 → 1.19.10 Minor PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 8 updates

RemyLoveLogicAI/Sentinelmind-ai #20

1.18.2 → 1.19.11 Minor PR

Open 2 months ago 9 comments

chore(deps): bump the npm_and_yarn group across 20 directories with 8 updates

jadenblack/composio #57

1.13.2 → 1.19.11 Minor PR

Closed 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

Sherlock999xxx/voltagent #50

1.18.2 → 1.19.10 Minor PR

Closed 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

Sherlock999xxx/voltagent #49

1.18.2 → 1.19.10 Minor PR

Open 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 3 updates

ecmaos/ecmaos #22

1.13.2 → 1.19.10 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 15 updates

shaunberkley/lifeos #88

1.13.8 → 1.19.11 Minor PR

Open 2 months ago 4 comments

Bump the npm_and_yarn group across 13 directories with 7 updates

LunaInsidious/alpaca #9

1.11.1 → 1.19.10 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 7 updates

idgrou/composio #248

1.13.2 → 1.19.11 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 8 updates

c6ai/x402 #5

1.15.0 → 1.19.10 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 14 updates

HunterSides/sanguine #25

1.13.2 → 1.19.11 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates

JohnDaWalka/x402 #23

1.15.0 → 1.19.10 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 13 updates

HunterSides/sanguine #19

1.13.2 → 1.19.11 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

AKJUS/6pm #28

1.12.2 → 1.19.10 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 16 directories with 11 updates

GlacierEQ/supabase #36

1.13.7 → 1.19.11 Minor PR

Open 3 months ago 4 comments

Bump the npm_and_yarn group across 4 directories with 7 updates

JoftheV/ai #6

1.12.2 → 1.19.10 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 6 updates

Activ8-AI/langgraph #15

1.17.1 → 1.19.11 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 12 directories with 7 updates

idgrou/composio #243

1.12.0 → 1.19.11 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates

rivet-dev/rivet #4445

1.14.2 → 1.19.10 Minor PR

Open 3 months ago 13 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 7 updates

paulpham157/composio #45

1.12.0 → 1.19.11 Minor PR

Closed 3 months ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,974 (47.8%)

Merged 220 (5.3%)

Closed 1,714 (41.5%)

PR Types

Major 111 (2.7%)

Minor 1,404 (34.0%)

Patch 2,393 (58.0%)