`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,097 Dependabot PRs

Latest PR:
about 20 hours ago

Unique Repositories:
1,647 repositories

Unique Repos (30 days):
170 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 5 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 1 day ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.7 → 1.19.14 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump the all-minor-and-patch group across 1 directory with 24 updates

TiM1113/FoodDelivery-AWS-Vercell #132

1.19.12 → 1.19.14 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 9 updates

conor-spec/goose #1

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

selfagency/teamdynamix-mcp #1

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

chore(deps): Bump the production-dependencies group across 1 directory with 6 updates

hottim900/sparkle #310

1.19.13 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

klodr/gmail-mcp #5

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 3 comments

chore(deps)(deps): bump @hono/node-server from 1.19.9 to 1.19.14

do-ops885/dermatology-goap-orchestrator #106

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 4 comments

chore(deps)(deps): bump the production-dependencies group across 1 directory with 50 updates

LLM-Dev-Ops/forge #61

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 2 comments

Bump @hono/node-server from 1.19.9 to 1.19.14 in the npm_and_yarn group across 1 directory

hashicorp-japan/terraform-workshop-jp #77

1.19.9 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

chore(deps): Bump the backend-deps group across 1 directory with 7 updates

marylin/whateverops #61

1.19.12 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 12 updates

ComeOnOliver/skillshub #58

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

Bump the development-version-updates group across 1 directory with 71 updates

mrlonis/example-angular-app #412

1.19.13 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 12 updates

objectstack-ai/objectos #320

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 3 comments

chore(deps)(deps): bump the production-dependencies group across 1 directory with 43 updates

sunweijieMJ/aix #71

1.19.13 → 1.19.14 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 16 updates

mamad2411/parantara-FIKSI #19

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 18 updates

buggyblues/shadow #227

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 15 updates

chaali03/parantara-FIKSI #17

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 4 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

jonathanmoregard/voquill #1

1.19.12 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump @hono/node-server from 1.19.13 to 1.19.14

Borgels/mantler-api #3

1.19.13 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 10 updates

billlzzz18/ai-sandbox #3

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.0 in /apps/api

kenwoo9y/forge-ts-example #501

1.19.14 → 2.0.0 Major PR

Closed about 1 month ago 1 comment

deps(npm): bump @hono/node-server from 1.19.11 to 1.19.14 in /prompt-babbler-app

PlagueHO/prompt-babbler #83

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates

chaudhary-rishabh/AI-Startup-Builder #16

1.19.13 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

deps: bump the production-dependencies group across 1 directory with 51 updates

GeorgeMwiki/BOSSNYUMBA101 #30

1.19.9 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 15 directories with 10 updates

BAS-More/Ezra- #28

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 15 directories with 13 updates

BAS-More/Ezra- #26

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 3 comments

build(deps-dev): bump the npm_and_yarn group across 1 directory with 5 updates

wysRocket/cloudbase #38

1.19.10 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 7 updates

acampkin95/Engram-platform #17

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 18 updates

buggyblues/shadow #224

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

AnalineS/roteirosdedispersacao #462

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 2 comments

chore(deps): Update @hono/node-server requirement from ^1.13.7 to ^1.19.14

dhruvalgupta2003/paygate #33

^1.13.7 → ^1.19.14 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 19 updates

LoveDoLove-Forked-Projects/cline #14

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

VisionaryArchitects/claudian #2

1.19.12 → 1.19.14 Patch PR

Open about 1 month ago 10 comments

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates

chaudhary-rishabh/AI-Startup-Builder #14

1.19.13 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

Bump @hono/node-server from 1.19.11 to 1.19.14

chahyunwoo/github-tier #18

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump @hono/node-server from 1.13.8 to 1.19.14

Ribs19/miniapps #1

1.13.8 → 1.19.14 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 9 updates

langwatch/langwatch #3276

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 3 directories with 9 updates

GeKorm/better-auth-harmony #61

1.19.10 → 1.19.13 Patch PR

Closed about 1 month ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.12 to 1.19.14

noa10/mataresit #57

1.19.12 → 1.19.14 Patch PR

Closed about 1 month ago 3 comments

Chore(deps): Bump the npm_and_yarn group across 4 directories with 9 updates

RalphHightower/grafana #49

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 15 directories with 14 updates

BAS-More/Ezra- #24

1.19.9 → 1.19.14 Patch PR

Open about 1 month ago 8 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 19 updates

valle808/Humanese #72

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 22 directories with 9 updates

grakke/code #382

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 26 directories with 5 updates

PostHog/posthog-js #3396

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 6 comments

Bump @hono/node-server from 1.19.12 to 1.19.14

demosjarco/cc-searxng #239

1.19.12 → 1.19.14 Patch PR

Open about 1 month ago 1 comment

chore(deps): Bump @hono/node-server from 1.19.11 to 1.19.14

spencerbeggs/jsonc-effect #29

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 6 updates

koreyba/EverFreeNote #102

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14

MahbubHS/colorWheel #23

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 29 directories with 7 updates

PostHog/posthog-js #3395

1.19.11 → 1.19.14 Patch PR

Open about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 26 directories with 5 updates

PostHog/posthog-js #3394

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 7 comments

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`