`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,096 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
1,646 repositories

Unique Repos (30 days):
169 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 4 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 7 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 6 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.6 → 1.19.13 Patch PR

Closed about 1 month ago 5 comments

chore(deps): bump @hono/node-server from 1.19.9 to 1.19.13

dsactivi-2/browserOsSer #8

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): Bump @hono/node-server from 1.19.9 to 1.19.13 in /frontend

mouseart2025/AI-Reader-V2 #5

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): Bump the production group across 1 directory with 17 updates

Quiet-Victory-Labs/runcontext #12

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

build(deps): Bump the npm_and_yarn group across 1 directory with 6 updates

e-mandy/Secretary_frontend_v2 #1

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates

ruchernchong/simplycpf #84

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 3 updates

pchristscribe/swordfighters-fullstack #40

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13

siliconharbour/siliconharbour.dev #19

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 3 updates

jscraik/mKit #12

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

Ndevu12/the_inventory #107

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 6 updates

g-kari/-cloudflare-markdown-mcp-server #4

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 67 updates

middleapi/orpc #1531

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 7 updates

Nene2592355/x402 #39

1.19.0 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 7 updates

c6ai/x402 #22

1.19.0 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 5 directories with 5 updates

WhatIfWeDigDeeper/application-tracker #273

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 19 directories with 9 updates

backbay-labs/clawdstrike #239

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates

groupthinking/EventRelay #164

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

Bump the npm_and_yarn group across 1 directory with 6 updates

iNoles/quote-day-angular #8

1.19.10 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 12 directories with 12 updates

arcjet/examples #160

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 15 directories with 12 updates

Subhan-Haider/Transfer-Data #15

1.19.7 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates

valle808/Humanese #63

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 3 updates

sc-shakyawijerathne/xmcloud-starter-js #71

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates

kpi-ua/intellect.kpi.ua #381

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 15 directories with 14 updates

BAS-More/Ezra- #12

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 28 directories with 6 updates

PostHog/posthog-js #3372

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

deps(deps): bump the security-patches group across 3 directories with 4 updates

VeVarunSharma/contoso-vibe-engineering #195

1.19.6 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

build(deps): bump the npm_and_yarn group across 17 directories with 10 updates

shazzar00ni/firecrawl-app-examples #309

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

m-idriss/3dime-angular #132

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /showcase/packages/langgraph-python

yonasBSD/CopilotKit #47

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /frontend

0xarchit/ApiCortex #25

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13

dytsou/github-readme-stats #189

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

Bump @hono/node-server in /

SaekiTominaga/blog.w0s.jp #893

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

deps(deps): bump the all-dependencies group across 1 directory with 16 updates

anirbanmu/muc #257

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates

sc-shakyawijerathne/xmcloud-starter-js #70

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.11 to 1.19.13 in /cockpit

Knaeckebrothero/Superhuman-Remote-Worker #75

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 12 directories with 15 updates

HDdev8/cal.com #22

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 11 updates

iqb-berlin/studio-lite #1418

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump the minor-and-patch group across 1 directory with 4 updates

navikt/sokos-up-skattekort-ssr #71

1.19.11 → 1.19.12 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13

NWACus/web #1029

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 15 updates

haardikppatel/tpro #8

1.19.9 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13 in the npm_and_yarn group across 1 directory

solo-ist/prose #413

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

Bump the npm_and_yarn group across 18 directories with 12 updates

Canmarha/vscode #47

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 28 updates

lijanhque/pedagogistspte.v.0.2.4 #1

1.19.8 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 4 directories with 6 updates

AKJUS/vscode #1580

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 14 comments

build(deps): bump the npm_and_yarn group across 2 directories with 3 updates

lucid-softworks/akari #383

1.19.5 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

bit-and-byte-ideas/larios-income-tax-website #53

1.19.10 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps-dev): bump @hono/node-server from 1.19.10 to 1.19.13

adityaphasu/notion-clone #44

1.19.10 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13 in the npm_and_yarn group across 1 directory

floriankuemmel/gmail-mcp #3

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 4 directories with 7 updates

AKJUS/vscode #1579

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 14 directories with 3 updates

AKJUS/angular #502

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.8%)

Merged 220 (5.4%)

Closed 1,700 (41.5%)

PR Types

Major 106 (2.6%)

Patch 2,366 (57.8%)

Minor 1,404 (34.3%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`