`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,097 Dependabot PRs

Latest PR:
about 16 hours ago

Unique Repositories:
1,647 repositories

Unique Repos (30 days):
170 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 5 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 21 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /examples/copilotkit-starter

awakenworks/awaken #88

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

tajemniktv/UnrealMCP #80

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 4 updates

18488292860-coder/vscode-copilot-chat #79

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13

Kyl67899/saferoute_landing_page #5

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 3 comments

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

mwridgway/studza #1

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /backend

jerelle-rimando/nodebrain #10

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.10 to 1.19.13 in /src/EDAConfirmWeb

SkiljaGmbH/PlatformSamples #93

1.19.10 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 4 directories with 18 updates

cogpy/occ #156

1.19.9 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

Bump @hono/node-server from 1.19.11 to 1.19.13

spree/storefront #113

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /agent-runner

mtzanidakis/praktor #88

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 5 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

wbhub/saas-starter #227

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

patrikx3/angular-http-cache-interceptor #5

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

kodustech/kodus-ai #881

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /tools/docker-gemini-cli/mcps/ollama

WetDogNose/hlbw-ai-hub #23

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

tn819/homeexchange-mcp #21

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

Ansvar-Systems/Zambian-law-mcp #21

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.13

codetalcott/hyperfixi #143

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

Bump @hono/node-server from 1.19.11 to 1.19.13 in /library

AikidoSec/firewall-node #994

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /.agents/mcp-servers/ast-analyzer

WetDogNose/hlbw-ai-hub #22

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /web

drose12/signpost #17

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

rzelazko/lime-tracker #171

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.10 to 1.19.13

mdresch/my-portfolio-menno #237

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

WisetechySolutions/spotify-mcp-server #19

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates

lopatnov/pressmark #33

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

deps(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.13

yannikstauffer/newsflash #46

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /application/organizer

wlambertz/rallyon #58

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13

jtalk22/slack-mcp-server #111

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.13

poad/aws-mastra-agent-example #39

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump @hono/node-server from 1.19.12 to 1.19.13

mpalourdio/ng-http-loader #514

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates

langwatch/langwatch #3021

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.10 to 1.19.13 in /example/ionic-angular-v8

getsentry/sentry-capacitor #1210

1.19.10 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

zntb/github-profile-maker #199

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

karmasakshi/jet #144

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

WetDogNose/hlbw-ai-hub #21

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 2 updates

mrveiss/AutoBot-AI #3949

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

safe-global/safe-wallet-monorepo #7583

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

Bump @hono/node-server from 1.19.12 to 1.19.13

palto/passphrase-forge #94

1.19.12 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

Ansvar-Systems/Chilean-law-mcp #35

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.11 to 1.19.13

viscalyx/Kravhantering #61

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

modelcontextprotocol/conformance #215

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.10 to 1.19.13

mocolicious/mocolResume #127

1.19.10 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.12 to 1.19.13

saludconectadard-png/SaludConectadaRD #5

1.19.12 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

pdvion/frm-erp #505

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 9 comments

Bump @hono/node-server from 1.19.11 to 1.19.13

patrikx3/angular-compile #45

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump @hono/node-server from 1.19.11 to 1.19.13 in /evals

pbsladek/ai-mr-comment #107

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13 in /packages/panel

slot-engine/slot-engine #79

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

abnerjs/abnerjs.github.io #25

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.13

CookieTeam-CA/cookieteam-ca.github.io #44

1.19.11 → 1.19.13 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump the npm_and_yarn group across 1 directory with 3 updates

gvps-cloud/skypanelv2 #99

1.19.11 → 1.19.13 Patch PR

Closed about 2 months ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`