`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,174 Dependabot PRs

Latest PR:
about 12 hours ago

Unique Repositories:
1,689 repositories

Unique Repos (30 days):
94 repositories

Security Advisories

@hono/node-server cannot handle "double dots" in URL

GHSA-rjq5-w47x-x359 CVE-2024-23340 MODERATE published over 2 years ago • updated 19 days ago

### Impact Since v1.3.0, we use our own Request object. This is great, but the `url` behavior is unexpected. In the standard API, if the URL cont...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 19 days ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 27 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.19.11 → 2.0.4 Major PR

Closed 2 days ago 2 comments

build(deps): bump @hono/node-server from 1.19.14 to 2.0.4 in /apps/api

letmepost/letmepost.dev #41

1.19.14 → 2.0.4 Major PR

Closed 4 days ago 3 comments

chore(deps): bump the npm-dependencies group with 29 updates

matudnorthrup/tango #100

1.19.11 → 2.0.4 Major PR

Closed 6 days ago 1 comment

build(deps): bump @hono/node-server from 1.19.14 to 2.0.4

RefuseHQ/refuse #23

1.19.14 → 2.0.4 Major PR

Closed 7 days ago 3 comments

chore(deps): bump the dependencies group across 1 directory with 33 updates

tekbreed/tekmemo #15

1.19.14 → 2.0.4 Major PR

Closed 18 days ago 2 comments

chore(deps): bump the dependencies group across 3 directories with 38 updates

Qnurye/qnuryes #247

1.19.13 → 2.0.4 Major PR

Closed 23 days ago 1 comment

chore(deps): bump the npm-all group with 67 updates

MatHoyer/hypertube #217

1.16.0 → 2.0.4 Major PR

Closed 23 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 58 updates

shogo-labs/shogo-ai #647

1.19.14 → 2.0.4 Major PR

Closed 24 days ago 2 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.3

omkmorendha/mcp-authkit #118

1.19.14 → 2.0.3 Major PR

Closed 27 days ago 3 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.3 in /apps/auth

JasonTM17/Leetrank_Project #16

1.19.14 → 2.0.3 Major PR

Closed 29 days ago 3 comments

Bump @hono/node-server from 1.19.13 to 2.0.3

xiaomoofficial/123 #121

1.19.13 → 2.0.3 Major PR

Closed 29 days ago 3 comments

chore(deps): bump @hono/node-server from 1.19.4 to 2.0.3

zhanghailang123/rss-vercel #619

1.19.4 → 2.0.3 Major PR

Closed 29 days ago 3 comments

chore(deps): bump the workspace-dependencies group across 1 directory with 31 updates

hb-dragons/dragons-hub #40

1.19.14 → 2.0.2 Major PR

Closed 29 days ago 1 comment

chore(deps): bump the production group across 1 directory with 52 updates

howarewoo/woo-stack #133

1.19.9 → 2.0.2 Major PR

Closed about 1 month ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 14 updates

charissystems/imara #27

1.19.9 → 2.0.2 Major PR

Closed about 1 month ago 2 comments

build(deps): bump @hono/node-server from 1.19.11 to 2.0.2

wangrui1573/rsshub-koysobackup #186

1.19.11 → 2.0.2 Major PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 7 directories with 4 updates

GlacierEQ/EdgeChains #9

0.6.0 → 2.0.2 Major PR

Closed about 1 month ago 4 comments

Bump @hono/node-server from 1.19.14 to 2.0.1

Hell1213/bot-pew1 #3

1.19.14 → 2.0.1 Major PR

Closed about 1 month ago 1 comment

Bump @hono/node-server from 1.19.9 to 2.0.1

aiconnect-cloud/confidant #40

1.19.9 → 2.0.1 Major PR

Closed about 1 month ago 1 comment

chore(deps): bump the all-dependencies group across 1 directory with 49 updates

amodalai/amodal #362

1.19.11 → 2.0.2 Major PR

Closed about 1 month ago 3 comments

chore(deps): bump @hono/node-server from 1.19.9 to 2.0.1

Merfy-Dropshipping-Platform/merfy-islands #26

1.19.9 → 2.0.1 Major PR

Closed about 1 month ago 2 comments

deps(gateway): bump @hono/node-server from 1.19.11 to 2.0.1 in /gateway

TentaCLAW-OS/TentaCLAW #42

1.19.11 → 2.0.1 Major PR

Closed about 1 month ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 14 updates

NumstackPtyLtd/supaproxy-server #53

1.19.14 → 2.0.1 Major PR

Closed about 1 month ago 2 comments

Bump @hono/node-server from 1.19.11 to 2.0.1

luolapeikko/create-luolapeikko-backend #11

1.19.11 → 2.0.1 Major PR

Closed about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.1

MarlBurroW/kinbot #374

1.19.14 → 2.0.1 Major PR

Closed about 1 month ago 2 comments

chore(deps): bump the dependencies group across 3 directories with 35 updates

Qnurye/qnuryes #222

1.19.13 → 2.0.2 Major PR

Closed about 1 month ago 1 comment

chore(deps): Bump @hono/node-server from 1.19.13 to 2.0.1

ephemere-io/oryzae #251

1.19.13 → 2.0.1 Major PR

Closed about 1 month ago 2 comments

deps: bump @hono/node-server from 1.19.14 to 2.0.1 in /packages/control

wiggertdehaan/Runway #31

1.19.14 → 2.0.1 Major PR

Closed about 1 month ago 1 comment

chore(deps): Bump @hono/node-server from 1.19.14 to 2.0.1

saikhurana98/swiggy-track #10

1.19.14 → 2.0.1 Major PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.9 to 2.0.1

figured233/my-repository #251

1.19.9 → 2.0.1 Major PR

Closed about 2 months ago 3 comments

build(deps): bump @hono/node-server from 1.19.9 to 2.0.1

LuigiAPCPereira/RSSHub #485

1.19.9 → 2.0.1 Major PR

Closed about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.14.3 to 2.0.1

do-dorio/comment2434-2 #936

1.14.3 → 2.0.1 Major PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.7 to 2.0.1

catlincao/MYRSSHUB #414

1.19.7 → 2.0.1 Major PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.19.7 to 2.0.1

spuct888/rsshub #433

1.19.7 → 2.0.1 Major PR

Closed about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.13.8 to 2.0.1

Mercurius-Lee/RSSHub #4025

1.13.8 → 2.0.1 Major PR

Closed about 2 months ago 3 comments

chore(deps): bump @hono/node-server from 1.13.8 to 2.0.1

oahiewuoil/RSSHub-1 #4787

1.13.8 → 2.0.1 Major PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.13 to 2.0.1

cocomamayan/yanchunyan #10

1.19.13 → 2.0.1 Major PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.6 to 2.0.1

Four5Fire/pt-gen-universal #58

1.19.6 → 2.0.1 Major PR

Closed about 2 months ago 2 comments

deps: bump @hono/node-server from 1.19.14 to 2.0.0

maonakamoto/orangecat #192

1.19.14 → 2.0.0 Major PR

Closed about 2 months ago 3 comments

Bump @hono/node-server from 1.19.14 to 2.0.1

lukecartledge/portfolio-tools #34

1.19.14 → 2.0.1 Major PR

Closed about 2 months ago 2 comments

chore(deps): bump the major group across 1 directory with 12 updates

rogeriochaves/open-managed-agents #14

1.19.13 → 2.0.0 Major PR

Closed about 2 months ago 2 comments

build(deps): bump @hono/node-server from 1.19.14 to 2.0.0

stackblaze-templates/hono #3

1.19.14 → 2.0.0 Major PR

Closed about 2 months ago 1 comment

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.0

vlad-iakovlev/expense #599

1.19.14 → 2.0.0 Major PR

Closed about 2 months ago 1 comment

build(deps): bump @hono/node-server from 1.19.12 to 2.0.0

xuzhiguang/pt-gen-universal1 #1

1.19.12 → 2.0.0 Major PR

Closed about 2 months ago 1 comment

Bump the production-dependencies group with 10 updates

NumstackPtyLtd/supaproxy-server #8

1.19.14 → 2.0.0 Major PR

Closed about 2 months ago 1 comment

Bump @hono/node-server from 1.19.14 to 2.0.0 in /deploy/api-gateway

alphavisionmethod/remix-of-sitav-companion #9

1.19.14 → 2.0.0 Major PR

Closed about 2 months ago 2 comments

Bump @hono/node-server from 1.19.12 to 2.0.0

nuozxy/pt-gen-universal #19

1.19.12 → 2.0.0 Major PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.12.0 to 2.0.0

backnero/RSSHub #1809

1.12.0 → 2.0.0 Major PR

Closed about 2 months ago 3 comments

Bump @hono/node-server from 1.14.0 to 2.0.0

mofanx/rsshub_test #1004

1.14.0 → 2.0.0 Major PR

Closed about 2 months ago 2 comments

chore(deps): bump @hono/node-server from 1.14.3 to 2.0.0

do-dorio/rsshub-comment2434 #1076

1.14.3 → 2.0.0 Major PR

Closed about 2 months ago 2 comments

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` about 1 year ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 2,000 (47.9%)

Merged 220 (5.3%)

Closed 1,732 (41.5%)

PR Types

Major 124 (3.0%)

Minor 1,410 (33.8%)

Patch 2,418 (58.0%)

@hono/node-server

Security Advisories

@hono/node-server cannot handle "double dots" in URL

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

Recent PRs (filtered by: Closed , Major PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`