`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,097 Dependabot PRs

Latest PR:
about 16 hours ago

Unique Repositories:
1,647 repositories

Unique Repos (30 days):
170 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 5 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 20 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.14 → 2.0.1 Major PR

Closed 24 days ago 2 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.1

kanyun-rush/open-rush #165

1.19.14 → 2.0.1 Major PR

Open 24 days ago 1 comment

deps(deps): bump @hono/node-server from 1.19.6 to 1.19.13 in /services/medical-api

VeVarunSharma/contoso-vibe-engineering #298

1.19.6 → 1.19.13 Patch PR

Open 24 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 11 directories with 24 updates

GlacierEQ/langgraphjs #6

1.14.4 → 1.19.13 Minor PR

Open 24 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 13 updates

stackconsult/RE-Engine #31

1.19.9 → 1.19.14 Patch PR

Open 24 days ago 1 comment

chore(deps): Bump @hono/node-server from 1.12.0 to 2.0.1

amynaff/my-lunar-phase #45

1.12.0 → 2.0.1 Major PR

Open 24 days ago 2 comments

chore(deps): bump the dependencies group across 3 directories with 35 updates

Qnurye/qnuryes #222

1.19.13 → 2.0.2 Major PR

Closed 24 days ago 1 comment

deps(deps): bump the minor-and-patch group with 11 updates

kjfsm/notion-headless-cms #157

2.0.0 → 2.0.1 Patch PR

Open 24 days ago 6 comments

chore(deps): Bump @hono/node-server from 1.19.13 to 2.0.1

ephemere-io/oryzae #251

1.19.13 → 2.0.1 Major PR

Closed 24 days ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates

ngx-vest-forms/ngx-vest-forms #102

1.19.11 → 1.19.14 Patch PR

Closed 24 days ago 1 comment

deps: bump @hono/node-server from 1.19.14 to 2.0.1 in /packages/control

wiggertdehaan/Runway #31

1.19.14 → 2.0.1 Major PR

Closed 24 days ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 28 updates

LoopDevs/Loop #1315

2.0.0 → 2.0.1 Patch PR

Open 24 days ago 2 comments

chore(deps): bump @hono/node-server from 2.0.0 to 2.0.1

sdk451/claude-gdrive #57

2.0.0 → 2.0.1 Patch PR

Closed 24 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 9 updates

ANT0071/drizzle-orm #6

1.14.3 → 1.19.13 Minor PR

Closed 25 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 11 updates

groupthinking/EventRelay #174

1.19.11 → 1.19.14 Patch PR

Closed 25 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 21 updates

Marketingtool-pro/my-angular-workspace #2

1.19.9 → 1.19.14 Patch PR

Open 25 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 9 directories with 8 updates

bluluvinn/x402 #16

1.19.0 → 1.19.13 Patch PR

Closed 25 days ago 1 comment

chore: bump the production-dependencies group with 5 updates

franverona/questlog #67

2.0.0 → 2.0.1 Patch PR

Closed 25 days ago 1 comment

chore(deps): Bump the npm_and_yarn group across 4 directories with 5 updates

ds1/pincerpay #110

1.19.11 → 1.19.13 Patch PR

Closed 25 days ago 2 comments

chore(deps): bump the production group across 1 directory with 50 updates

howarewoo/woo-stack #131

1.19.9 → 2.0.1 Major PR

Open 25 days ago 2 comments

build(deps): bump @hono/node-server from 1.19.13 to 2.0.1

langchain-ai/deepagentsjs #509

1.19.13 → 2.0.1 Major PR

Open 26 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 5 updates

SauelAlmonte/s-almonte-portfolio #45

1.19.10 → 1.19.14 Patch PR

Open 26 days ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.14 in /frontend

HubReb/basicToDo #56

1.19.9 → 1.19.14 Patch PR

Open 26 days ago 2 comments

chore(deps): Bump @hono/node-server from 1.19.14 to 2.0.1

saikhurana98/swiggy-track #10

1.19.14 → 2.0.1 Major PR

Closed 26 days ago 1 comment

Bump @hono/node-server from 1.19.13 to 2.0.1

19925527089/project #85

1.19.13 → 2.0.1 Major PR

Open 26 days ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.1

figured233/my-repository #251

1.19.9 → 2.0.1 Major PR

Closed 26 days ago 3 comments

build(deps): bump @hono/node-server from 1.19.9 to 2.0.1

LuigiAPCPereira/RSSHub #485

1.19.9 → 2.0.1 Major PR

Closed 26 days ago 3 comments

chore(deps): bump @hono/node-server from 1.14.3 to 2.0.1

do-dorio/comment2434-2 #936

1.14.3 → 2.0.1 Major PR

Closed 26 days ago 2 comments

chore(deps): bump @hono/node-server from 1.19.7 to 2.0.1

catlincao/MYRSSHUB #414

1.19.7 → 2.0.1 Major PR

Closed 26 days ago 2 comments

chore(deps): bump @hono/node-server from 1.19.7 to 2.0.1

spuct888/rsshub #433

1.19.7 → 2.0.1 Major PR

Closed 26 days ago 2 comments

chore(deps): bump @hono/node-server from 1.12.0 to 2.0.1

backnero/RSSHub #1849

1.12.0 → 2.0.1 Major PR

Open 26 days ago 2 comments

build(deps): bump @hono/node-server from 1.13.8 to 2.0.1

Mercurius-Lee/RSSHub #4025

1.13.8 → 2.0.1 Major PR

Closed 26 days ago 3 comments

chore(deps): bump @hono/node-server from 1.13.8 to 2.0.1

SiqingYu/RSSHub #4588

1.13.8 → 2.0.1 Major PR

Open 26 days ago 1 comment

chore(deps): bump @hono/node-server from 1.13.8 to 2.0.1

oahiewuoil/RSSHub-1 #4787

1.13.8 → 2.0.1 Major PR

Closed 26 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

LeXwDeX/opencode #12

1.19.11 → 1.19.13 Patch PR

Open 26 days ago 2 comments

chore(deps): bump the all-dependencies group with 46 updates

amodalai/amodal #328

1.19.11 → 2.0.1 Major PR

Open 26 days ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.1

vynseral/rsshub-never-die #32

1.19.9 → 2.0.1 Major PR

Open 27 days ago 1 comment

Bump @hono/node-server from 1.19.6 to 2.0.1

Four5Fire/pt-gen-universal #58

1.19.6 → 2.0.1 Major PR

Closed 27 days ago 2 comments

Bump @hono/node-server from 1.19.14 to 2.0.1

pmatos/symphonika #37

1.19.14 → 2.0.1 Major PR

Open 27 days ago 1 comment

chore(deps): bump @hono/node-server from 2.0.0 to 2.0.1

CaoMeiYouRen/hono-template #1148

2.0.0 → 2.0.1 Patch PR

Closed 27 days ago 2 comments

build(deps): bump the npm_and_yarn group across 3 directories with 14 updates

sentry-demos/empower #1451

1.19.9 → 1.19.14 Patch PR

Closed 27 days ago 2 comments

build(deps): Bump the all-deps group with 4 updates

teocomyn/commerce-agent-protocol #14

1.19.11 → 1.19.14 Patch PR

Open 28 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

gsinghjay/astro-shadcn-sanity #674

1.19.9 → 1.19.14 Patch PR

Closed 29 days ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.14

mimo-3/mcp-imagenate #6

1.19.11 → 1.19.14 Patch PR

Closed 29 days ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.14

OctalMesh/OctalWeb-Links #5

1.19.11 → 1.19.14 Patch PR

Closed 29 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.0

OrellBuehler/bissbilanz #220

1.19.14 → 2.0.0 Major PR

Open 30 days ago 1 comment

Bump @hono/node-server from 1.19.14 to 2.0.1

lukecartledge/portfolio-tools #34

1.19.14 → 2.0.1 Major PR

Closed 30 days ago 2 comments

chore(deps): bump @hono/node-server from 1.19.12 to 2.0.0 in /relay-server

AndreaGriffiths11/claw-relay #106

1.19.12 → 2.0.0 Major PR

Open about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.0

objectstack-ai/objectui #1274

1.19.14 → 2.0.0 Major PR

Open about 1 month ago 4 comments

chore(deps): Bump @hono/node-server from 1.19.14 to 2.0.0

newlandpe/chost-pulse-worker #30

1.19.14 → 2.0.0 Major PR

Open about 1 month ago 2 comments

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`