`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,106 Dependabot PRs

Latest PR:
about 15 hours ago

Unique Repositories:
1,649 repositories

Unique Repos (30 days):
165 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 7 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server cannot handle "double dots" in URL

GHSA-rjq5-w47x-x359 CVE-2024-23340 MODERATE published over 2 years ago • updated about 23 hours ago

### Impact Since v1.3.0, we use our own Request object. This is great, but the `url` behavior is unexpected. In the standard API, if the URL cont...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 23 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 9 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

Recent PRs (filtered by: Merged , Patch PRs )

RSS Feed Clear filter

Bump @hono/node-server from 1.19.1 to 1.19.5

SaekiTominaga/media.w0s.jp #122

1.19.1 → 1.19.5 Patch PR

Merged 8 months ago

Bump @hono/node-server from 1.19.0 to 1.19.5

SaekiTominaga/blog.w0s.jp #547

1.19.0 → 1.19.5 Patch PR

Merged 8 months ago

Bump @hono/node-server from 1.19.4 to 1.19.5

SaekiTominaga/report.w0s.jp #119

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

Bump the hono group with 2 updates

mburumaxwell/dependabot-azure-devops #2041

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago 1 comment

Bump @hono/node-server from 1.19.1 to 1.19.5

axenovV/telegram-bot-template #23

1.19.1 → 1.19.5 Patch PR

Merged 8 months ago

chore: bump the patch group with 4 updates

mxz7/nypsi #2191

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.3 to 1.19.5

fireproof-storage/fireproof #1203

1.19.3 → 1.19.5 Patch PR

Merged 8 months ago

build(deps-dev): bump the minor-and-patch group across 1 directory with 4 updates

navikt/sokos-utbetalingsportalen #631

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

chore(deps-dev): bump @hono/node-server from 1.19.3 to 1.19.5

hiro0218/b.0218.jp #1170

1.19.3 → 1.19.5 Patch PR

Merged 8 months ago 4 comments

build(deps-dev): bump the development-dependencies group with 11 updates

declanlscott/fodder #305

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

Bump @hono/node-server from 1.19.4 to 1.19.5

REChain-Network-Solutions/PerpStats #40

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.4 to 1.19.5

CaoMeiYouRen/hono-template #648

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago 3 comments

deps: bump @hono/node-server from 1.19.4 to 1.19.5

HeapFox/heapfox #10

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.4 to 1.19.5

nekofar/farcaster-frames-template #717

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

build(deps): bump @hono/node-server from 1.19.4 to 1.19.5 in /server

qoomon/actions--access-token #700

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago

chore(deps-dev): bump @hono/node-server from 1.19.1 to 1.19.5

rexeus/typeweaver #67

1.19.1 → 1.19.5 Patch PR

Merged 8 months ago

Bump @hono/node-server from 1.19.4 to 1.19.5

finki-hub/finki-scraper #340

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago 1 comment

chore(deps-dev): bump the dev-dependencies-minor-patch group with 12 updates

unnoq/orpc #1049

1.19.4 → 1.19.5 Patch PR

Merged 8 months ago 4 comments

Bump the patch-updates group in /backend with 4 updates

canoypa/nocsis #842

1.19.3 → 1.19.4 Patch PR

Merged 8 months ago

Bump the hono group with 2 updates

autosec-network/eaas #580

1.19.3 → 1.19.4 Patch PR

Merged 8 months ago 4 comments

chore: bump the patch group across 1 directory with 3 updates

mxz7/nypsi #2178

1.19.3 → 1.19.4 Patch PR

Merged 8 months ago

build(deps-dev): bump the development-dependencies group with 9 updates

declanlscott/fodder #303

1.19.2 → 1.19.4 Patch PR

Merged 8 months ago

Bump @hono/node-server from 1.19.2 to 1.19.4

REChain-Network-Solutions/PerpStats #36

1.19.2 → 1.19.4 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.3 to 1.19.4

CaoMeiYouRen/hono-template #632

1.19.3 → 1.19.4 Patch PR

Merged 8 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.3 to 1.19.4

nekofar/farcaster-frames-template #706

1.19.3 → 1.19.4 Patch PR

Merged 8 months ago

build(deps): bump @hono/node-server from 1.19.1 to 1.19.4

kevboutin/node-boilerplate #165

1.19.1 → 1.19.4 Patch PR

Merged 8 months ago

build(deps): bump @hono/node-server from 1.19.2 to 1.19.4 in /server

qoomon/actions--access-token #690

1.19.2 → 1.19.4 Patch PR

Merged 8 months ago

build(deps): bump the dependencies group with 5 updates

intbvte/downtime #51

1.19.2 → 1.19.4 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.3 to 1.19.4

DIYgod/RSSHub #20125

1.19.3 → 1.19.4 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.3 to 1.19.4

oouxx/RSSHub #733

1.19.3 → 1.19.4 Patch PR

Merged 8 months ago 2 comments

Bump the patch-updates group in /backend with 3 updates

canoypa/nocsis #834

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.2 to 1.19.3

nczitzk/RSSHub #2496

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.2 to 1.19.3

DIYgod/RSSHub #20084

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago

Bump the npm group with 8 updates

poad/vercel-functions-example #314

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago 1 comment

build(deps): bump the minor-and-patch group across 1 directory with 3 updates

navikt/sokos-utbetalingsportalen #620

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago

chore: bump the patch group across 1 directory with 5 updates

mxz7/nypsi #2170

1.19.1 → 1.19.3 Patch PR

Merged 8 months ago

chore(deps): bump the dependencies group across 1 directory with 5 updates

webpack/webpack-dev-middleware #2169

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago

Bump @hono/node-server from 1.19.2 to 1.19.3

jder-std/hono #87

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago

chore(deps): bump @hono/node-server from 1.19.2 to 1.19.3

CaoMeiYouRen/hono-template #617

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago 3 comments

chore(deps): bump @hono/node-server from 1.19.2 to 1.19.3

nekofar/farcaster-frames-template #695

1.19.2 → 1.19.3 Patch PR

Merged 8 months ago

build(deps-dev): bump the development-dependencies group with 6 updates

declanlscott/fodder #300

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago 1 comment

Bump @hono/node-server from 1.19.1 to 1.19.2

REChain-Network-Solutions/PerpStats #35

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago

build(deps): bump @hono/node-server from 1.19.1 to 1.19.2 in /server

qoomon/actions--access-token #668

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago

Bump @hono/node-server from 1.19.1 to 1.19.2

CyberismoCom/cyberismo #919

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago

Bump the minor-and-patch group with 6 updates

navikt/sokos-astro-template #22

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago

Bump the hono group with 2 updates

mburumaxwell/dependabot-azure-devops #1982

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago 1 comment

Bump @hono/node-server from 1.19.0 to 1.19.2

nacal/runbook-admin #22

1.19.0 → 1.19.2 Patch PR

Merged 9 months ago

fix(deps): bump the all group across 1 directory with 16 updates

FriendsOfShopware/shopmon #519

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago

Bump the patch-updates group in /backend with 4 updates

canoypa/nocsis #813

1.19.1 → 1.19.2 Patch PR

Merged 9 months ago

Bump @hono/node-server from 1.19.0 to 1.19.2 in /backend-node

flathub-infra/website #5578

1.19.0 → 1.19.2 Patch PR

Merged 9 months ago

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,961 (47.8%)

Merged 220 (5.4%)

Closed 1,705 (41.5%)

PR Types

Major 108 (2.6%)

Minor 1,404 (34.2%)

Patch 2,374 (57.8%)