`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,097 Dependabot PRs

Latest PR:
about 9 hours ago

Unique Repositories:
1,647 repositories

Unique Repos (30 days):
170 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 4 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 14 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 3 comments

Bump the npm_and_yarn group across 54 directories with 5 updates

microsoft/aspire #15954

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13

AndreaGriffiths11/claw-relay #85

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13

compose-market/web #22

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13 in /mcp-server

gemini-cli-extensions/security #157

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13

marktron/randonneurs-ontario #62

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13

stephen-wm/nestwork #22

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13

isidromerayo/TFG_UNIR-angular #153

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore: bump @hono/node-server from 1.19.12 to 1.19.13

TypeCellOS/BlockNote #2632

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

kiraec123-web/cool-down-studio #1

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

KP1709/WorldCityTimezoneSearchV2 #4

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

DrWheelicus/questrade-mcp-server #15

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.12 to 1.19.13

BlueSignal-XYZ/marketplace #260

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

phoenixvc/retort #509

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps): Bump @hono/node-server from 1.19.11 to 1.19.13

che-incubator/chectl #3138

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 2 directories with 2 updates

mar2181/lovable-clone #2

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13

harryzcy/konfig #2541

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13

Kings-World/discord-status-webhook #198

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13

izorg/munchkin-material #363

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

Build(deps): Bump @hono/node-server from 1.19.12 to 1.19.13 in /src/MakesCentsToMe.Web

ronlease/Makes-Cents-to-Me #13

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 3 comments

chore(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.13 in /dashboard

webpeel/webpeel #24

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13 in /sanity-ecommerce-app

sanidhyy/ecommerce-app #130

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

Shironex/shiroani #27

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

tigerzewelly33l/hermes-ultra-public #3

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 7 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

wiseweb-works/job-application-tracker #4

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13 in /mcp-server

velezy/yamil-browser #13

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

chittyos/chittycommand #83

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 4 comments

Bump @hono/node-server from 1.19.12 to 1.19.14

Arnab-Developer/TestPortal #44

1.19.12 → 1.19.14 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.13

Tresillo2017/zephyron #38

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 4 updates

Poketech729/hmaiv1 #4

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.12 to 1.19.13 in /ui

GlueOps/autoglue #822

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

litingyes/me #9

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 6 updates

henryperkins/flavor-agent #7

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

egeuysall/ibx #1

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.10 to 1.19.13

camillanapoles/super-productivity #65

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

colinvkim/imagetools #5

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13

apioo/fusio-apps-backend #100

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

huynhrobert/rachel #1

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

LCSOGthb/RACS #4

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

theunstopabble/TexFolio #4

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

Cavern-Studios/mpp-proxy #7

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 3 updates

groupthinking/EventRelay #161

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 4 comments

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13

xdev-asia-labs/xClaw #29

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

Jimimaku/vscode #1258

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.13

tyrumai/tyrum #1942

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 2 updates

sc-krishanthakumara/xmcloud-starter-js #58

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

deps: bump @hono/node-server from 1.19.11 to 1.19.13

g-but/orangecat #177

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

miklosbagi/jira-zephyr-mcp #78

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.13

objectstack-ai/objectql #440

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 6 comments

Bump @hono/node-server from 1.19.12 to 1.19.13 in /internal/controlplane/providers/claude/sdkbridge

benjaminwestern/agentic-control #1

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`