`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,104 Dependabot PRs

Latest PR:
about 22 hours ago

Unique Repositories:
1,649 repositories

Unique Repos (30 days):
166 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 6 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server cannot handle "double dots" in URL

GHSA-rjq5-w47x-x359 CVE-2024-23340 MODERATE published over 2 years ago • updated about 7 hours ago

### Impact Since v1.3.0, we use our own Request object. This is great, but the `url` behavior is unexpected. In the standard API, if the URL cont...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 7 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 8 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

Recent PRs (filtered by: Closed , Patch PRs )

RSS Feed Clear filter

chore(deps): bump the minor-and-patch group with 6 updates

reaatech/prompt-version-control #29

2.0.2 → 2.0.4 Patch PR

Closed 2 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 17 updates

LoveDoLove-Forked-Projects/cline #35

1.19.11 → 1.19.14 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump @hono/node-server from 2.0.3 to 2.0.4

CaoMeiYouRen/hono-template #1205

2.0.3 → 2.0.4 Patch PR

Closed 4 days ago 2 comments

build(deps): bump the runtime-dependencies group across 1 directory with 13 updates

Thalermark/thalermark #93

2.0.3 → 2.0.4 Patch PR

Closed 4 days ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 8 updates

pvnarp/membervault #1

1.19.11 → 1.19.13 Patch PR

Closed 5 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 22 updates

michaelhughes2501/ruflo #8

1.19.9 → 1.19.14 Patch PR

Closed 5 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 17 updates

AlDracuX/RuVector #5

1.19.9 → 1.19.14 Patch PR

Closed 6 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 22 updates

michaelhughes2501/ruflo #4

1.19.9 → 1.19.14 Patch PR

Closed 6 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 10 updates

4xiaxia/claude-flow #6

1.19.7 → 1.19.14 Patch PR

Closed 6 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

renart-data/renart #15

1.19.11 → 1.19.14 Patch PR

Closed 8 days ago 1 comment

build(deps): Bump the dependencies group with 7 updates

nmerget/trupu #10

2.0.2 → 2.0.3 Patch PR

Closed 9 days ago 1 comment

chore: Bump the npm_and_yarn group across 1 directory with 14 updates

facioquo/stock-charts #478

1.19.9 → 1.19.14 Patch PR

Closed 10 days ago 3 comments

build(deps): Bump the all-deps group across 1 directory with 14 updates

teocomyn/commerce-agent-protocol #18

1.19.11 → 1.19.14 Patch PR

Closed 10 days ago 3 comments

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14

gengjiawen/sass-template #31

1.19.11 → 1.19.14 Patch PR

Closed 10 days ago 2 comments

Bump @hono/node-server from 2.0.2 to 2.0.3

Qarzi-man/rsshub-news #18

2.0.2 → 2.0.3 Patch PR

Closed 10 days ago 3 comments

chore(deps): bump the npm-dependencies group across 1 directory with 22 updates

kubotama/bookmark-page #558

2.0.1 → 2.0.2 Patch PR

Closed 11 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14

Enflame-Media/Magic-Agent #198

1.19.11 → 1.19.14 Patch PR

Closed 11 days ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates

reaatech/prompt-version-control #17

2.0.1 → 2.0.2 Patch PR

Closed 11 days ago 3 comments

deps(deps): bump the minor-and-patch group across 1 directory with 29 updates

kjfsm/notion-headless-cms #272

2.0.1 → 2.0.2 Patch PR

Closed 13 days ago 5 comments

Bump the npm_and_yarn group across 1 directory with 9 updates

stefanteitge/rc-cloud #21

1.19.9 → 1.19.14 Patch PR

Closed 14 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

fat-fuzzy/rocks #996

1.19.9 → 1.19.14 Patch PR

Closed 14 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 19 updates

fork-the-planet/agents #44

1.19.11 → 1.19.14 Patch PR

Closed 15 days ago 1 comment

chore(deps): bump @hono/node-server from 2.0.0 to 2.0.2

sdk451/claude-gdrive #63

2.0.0 → 2.0.2 Patch PR

Closed 19 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

nosportugal/backstage-plugin-dev-ai-hub #19

1.19.11 → 1.19.14 Patch PR

Closed 20 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 22 updates

AntwerpDesignsIonity/RuVector #10

1.19.9 → 1.19.14 Patch PR

Closed 20 days ago 1 comment

Bump the npm_and_yarn group across 6 directories with 9 updates

abdurrazzak7395-rgb/workflow #20

1.19.5 → 1.19.13 Patch PR

Closed 20 days ago 1 comment

chore(deps): update @hono/node-server requirement from ^2.0.1 to ^2.0.2

vigneshksaithal/devvitsvelte #119

^2.0.1 → ^2.0.2 Patch PR

Closed 20 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 22 updates

valle808/Humanese #81

1.19.11 → 1.19.14 Patch PR

Closed 22 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

phoenixvc/retort #513

1.19.11 → 1.19.14 Patch PR

Closed 22 days ago 2 comments

Bump the security-updates group across 1 directory with 3 updates

drasticstatic/tradingview-mcp-jackson #2

1.19.11 → 1.19.14 Patch PR

Closed 22 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

bartholomej/node-csfd-api #186

1.19.11 → 1.19.14 Patch PR

Closed 22 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

mattmck/swatchwatch #187

1.19.9 → 1.19.14 Patch PR

Closed 22 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.12 to 1.19.14

webdriverio/mcp #98

1.19.12 → 1.19.14 Patch PR

Closed 23 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 10 updates

daezoxx/goose #5

1.19.11 → 1.19.14 Patch PR

Closed 23 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

scherenhaenden/MagnetarQuill #83

1.19.9 → 1.19.14 Patch PR

Closed 24 days ago 3 comments

chore(deps): Bump the minor-and-patch group with 8 updates

trailfed/trailfed #45

2.0.0 → 2.0.1 Patch PR

Closed 25 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates

ngx-vest-forms/ngx-vest-forms #102

1.19.11 → 1.19.14 Patch PR

Closed 25 days ago 1 comment

chore(deps): bump @hono/node-server from 2.0.0 to 2.0.1

sdk451/claude-gdrive #57

2.0.0 → 2.0.1 Patch PR

Closed 26 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 11 updates

groupthinking/EventRelay #174

1.19.11 → 1.19.14 Patch PR

Closed 27 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 9 directories with 8 updates

bluluvinn/x402 #16

1.19.0 → 1.19.13 Patch PR

Closed 27 days ago 1 comment

chore: bump the production-dependencies group with 5 updates

franverona/questlog #67

2.0.0 → 2.0.1 Patch PR

Closed 27 days ago 1 comment

chore(deps): Bump the npm_and_yarn group across 4 directories with 5 updates

ds1/pincerpay #110

1.19.11 → 1.19.13 Patch PR

Closed 27 days ago 2 comments

chore(deps): bump @hono/node-server from 2.0.0 to 2.0.1

CaoMeiYouRen/hono-template #1148

2.0.0 → 2.0.1 Patch PR

Closed 28 days ago 2 comments

build(deps): bump the npm_and_yarn group across 3 directories with 14 updates

sentry-demos/empower #1451

1.19.9 → 1.19.14 Patch PR

Closed 28 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

gsinghjay/astro-shadcn-sanity #674

1.19.9 → 1.19.14 Patch PR

Closed 30 days ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.14

mimo-3/mcp-imagenate #6

1.19.11 → 1.19.14 Patch PR

Closed 30 days ago 1 comment

Bump @hono/node-server from 1.19.11 to 1.19.14

OctalMesh/OctalWeb-Links #5

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

Bump @hono/node-server from 1.19.9 to 1.19.14 in the npm_and_yarn group across 1 directory

brycepollack/sf-map #4

1.19.9 → 1.19.14 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 24 directories with 9 updates

alvesribeirof/pos_graduacao #29

1.19.9 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

mdjahid11978-design/modelcontextprotocol #3

1.19.11 → 1.19.14 Patch PR

Closed about 1 month ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,960 (47.8%)

Merged 220 (5.4%)

Closed 1,704 (41.5%)

PR Types

Major 108 (2.6%)

Minor 1,404 (34.2%)

Patch 2,372 (57.8%)