`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,120 Dependabot PRs

Latest PR:
about 11 hours ago

Unique Repositories:
1,658 repositories

Unique Repos (30 days):
157 repositories

Security Advisories

@hono/node-server cannot handle "double dots" in URL

GHSA-rjq5-w47x-x359 CVE-2024-23340 MODERATE published over 2 years ago • updated 4 days ago

### Impact Since v1.3.0, we use our own Request object. This is great, but the `url` behavior is unexpected. In the standard API, if the URL cont...

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 9 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated 4 days ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 12 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

Recent PRs (filtered by: Open , Major PRs )

RSS Feed Clear filter

build(deps): bump @hono/node-server from 1.19.14 to 2.0.4

arkorlab/arkor #165

1.19.14 → 2.0.4 Major PR

Open 3 days ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 57 updates

shogo-labs/shogo-ai #699

1.19.14 → 2.0.4 Major PR

Open 4 days ago 1 comment

Bump @hono/node-server from 1.19.11 to 2.0.4

STiVeReS/gamenews-rss-hub #203

1.19.11 → 2.0.4 Major PR

Open 7 days ago 1 comment

Bump @hono/node-server from 1.19.13 to 2.0.4

xiaomoofficial/123 #135

1.19.13 → 2.0.4 Major PR

Open 7 days ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.4

tigerlaibao/rsshub #254

1.19.9 → 2.0.4 Major PR

Open 7 days ago 2 comments

chore(deps): bump @hono/node-server from 1.18.1 to 2.0.4

mengx8/RSSHub #1060

1.18.1 → 2.0.4 Major PR

Open 7 days ago 1 comment

build(deps): bump the security-and-runtime group with 7 updates

haaofficail/nasaq #350

1.19.13 → 2.0.4 Major PR

Open 7 days ago 1 comment

deps: bump the production-dependencies group across 1 directory with 55 updates

GeorgeMwiki/BOSSNYUMBA101 #161

1.19.13 → 2.0.4 Major PR

Open 7 days ago 1 comment

chore(deps): bump the dependencies group with 32 updates

tekbreed/tekmemo #13

1.19.14 → 2.0.3 Major PR

Open 9 days ago 1 comment

deps: bump the production-dependencies group across 1 directory with 54 updates

GeorgeMwiki/BOSSNYUMBA101 #159

1.19.13 → 2.0.3 Major PR

Open 9 days ago 1 comment

deps(gateway): bump @hono/node-server from 1.19.11 to 2.0.3 in /gateway

TentaCLAW-OS/TentaCLAW #59

1.19.11 → 2.0.3 Major PR

Open 13 days ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 20 updates

Cam-Smith-One/Headless_CRM #7

1.19.11 → 2.0.3 Major PR

Open 14 days ago 1 comment

chore(deps): bump the production-dependencies group with 13 updates

NumstackPtyLtd/supaproxy-server #113

1.19.14 → 2.0.2 Major PR

Open 16 days ago 1 comment

chore(deps)[api](deps): bump @hono/node-server from 1.19.14 to 2.0.2 in /apps/api

eric-sison/victory-apps #14

1.19.14 → 2.0.2 Major PR

Open 17 days ago 1 comment

chore(deps): bump the security-and-runtime group across 1 directory with 10 updates

haaofficail/nasaq #257

1.19.13 → 2.0.2 Major PR

Open 17 days ago 1 comment

Bump the all-dependencies group across 1 directory with 50 updates

amodalai/amodal #443

1.19.11 → 2.0.2 Major PR

Open 19 days ago 2 comments

Bump the hono group with 2 updates

ocque41/relay #5

1.19.14 → 2.0.2 Major PR

Open 21 days ago 1 comment

Bump @hono/node-server from 1.19.11 to 2.0.2

cjtcjtcjt2-star/my-rsshub #207

1.19.11 → 2.0.2 Major PR

Open 21 days ago 2 comments

Bump @hono/node-server from 1.19.11 to 2.0.2

rzrcazk/rsshub #183

1.19.11 → 2.0.2 Major PR

Open 21 days ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.2

tigerlaibao/rsshub #223

1.19.9 → 2.0.2 Major PR

Open 21 days ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.2

figured233/my-repository #281

1.19.9 → 2.0.2 Major PR

Open 21 days ago 2 comments

chore(deps): bump @hono/node-server from 1.19.7 to 2.0.2

catlincao/MYRSSHUB #447

1.19.7 → 2.0.2 Major PR

Open 21 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.4 to 2.0.2

zhanghailang123/rss-vercel #603

1.19.4 → 2.0.2 Major PR

Open 21 days ago 2 comments

chore(deps): bump @hono/node-server from 1.14.3 to 2.0.2

do-dorio/rsshub-comment2434 #1140

1.14.3 → 2.0.2 Major PR

Open 21 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 14 updates

sidereal-io/sidereal #126

1.19.13 → 2.0.2 Major PR

Open 21 days ago 1 comment

Bump @hono/node-server from 1.19.14 to 2.0.2 in /apps/backend

kea0811/microcrew #5

1.19.14 → 2.0.2 Major PR

Open 21 days ago 1 comment

Bump @hono/node-server from 1.19.14 to 2.0.2 in /api

tonylam0/blue #2

1.19.14 → 2.0.2 Major PR

Open 22 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.13 to 2.0.1

Nhollas/local-agents #86

1.19.13 → 2.0.1 Major PR

Open 25 days ago 1 comment

build(deps): bump the workspace-dependencies group across 1 directory with 49 updates

hb-dragons/dragons-hub #36

1.19.14 → 2.0.1 Major PR

Open 27 days ago 2 comments

Bump @hono/node-server from 1.19.14 to 2.0.1 in /deploy/brain-core

alphavisionmethod/remix-of-sitav-companion #13

1.19.14 → 2.0.1 Major PR

Open 27 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.1

bitcoin-is-money/bim-app #52

1.19.14 → 2.0.1 Major PR

Open 27 days ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 13 updates

0xHoneyJar/loa-dixie #91

1.19.9 → 2.0.1 Major PR

Open 28 days ago 2 comments

chore(deps)(deps): bump @hono/node-server from 1.19.9 to 2.0.1

do-ops885/dermatology-goap-orchestrator #112

1.19.9 → 2.0.1 Major PR

Open 28 days ago 4 comments

chore(deps): bump the production-dependencies group with 9 updates

Kevinmrgt/aiSport #5

1.19.14 → 2.0.1 Major PR

Open 28 days ago 1 comment

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.1

kanyun-rush/open-rush #165

1.19.14 → 2.0.1 Major PR

Open 28 days ago 1 comment

chore(deps): Bump @hono/node-server from 1.12.0 to 2.0.1

amynaff/my-lunar-phase #45

1.12.0 → 2.0.1 Major PR

Open 29 days ago 2 comments

chore(deps): bump the production group across 1 directory with 50 updates

howarewoo/woo-stack #131

1.19.9 → 2.0.1 Major PR

Open about 1 month ago 2 comments

build(deps): bump @hono/node-server from 1.19.13 to 2.0.1

langchain-ai/deepagentsjs #509

1.19.13 → 2.0.1 Major PR

Open about 1 month ago 2 comments

Bump @hono/node-server from 1.19.13 to 2.0.1

19925527089/project #85

1.19.13 → 2.0.1 Major PR

Open about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.12.0 to 2.0.1

backnero/RSSHub #1849

1.12.0 → 2.0.1 Major PR

Open about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.13.8 to 2.0.1

SiqingYu/RSSHub #4588

1.13.8 → 2.0.1 Major PR

Open about 1 month ago 1 comment

chore(deps): bump the all-dependencies group with 46 updates

amodalai/amodal #328

1.19.11 → 2.0.1 Major PR

Open about 1 month ago 2 comments

Bump @hono/node-server from 1.19.9 to 2.0.1

vynseral/rsshub-never-die #32

1.19.9 → 2.0.1 Major PR

Open about 1 month ago 1 comment

Bump @hono/node-server from 1.19.14 to 2.0.1

pmatos/symphonika #37

1.19.14 → 2.0.1 Major PR

Open about 1 month ago 1 comment

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.0

OrellBuehler/bissbilanz #220

1.19.14 → 2.0.0 Major PR

Open about 1 month ago 1 comment

chore(deps): bump @hono/node-server from 1.19.12 to 2.0.0 in /relay-server

AndreaGriffiths11/claw-relay #106

1.19.12 → 2.0.0 Major PR

Open about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.0

objectstack-ai/objectui #1274

1.19.14 → 2.0.0 Major PR

Open about 1 month ago 4 comments

chore(deps): Bump @hono/node-server from 1.19.14 to 2.0.0

newlandpe/chost-pulse-worker #30

1.19.14 → 2.0.0 Major PR

Open about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.19.14 to 2.0.0

YojinHQ/Yojin #471

1.19.14 → 2.0.0 Major PR

Open about 1 month ago 1 comment

Bump @hono/node-server from 1.19.13 to 2.0.0

uesrzonf/rsshub-never-die #8

1.19.13 → 2.0.0 Major PR

Open about 1 month ago 1 comment

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,968 (47.8%)

Merged 220 (5.3%)

Closed 1,710 (41.5%)

PR Types

Major 110 (2.7%)

Minor 1,404 (34.1%)

Patch 2,384 (57.9%)