`@hono/node-server`

Ecosystem:
npm

Package URL:
pkg:npm/@hono/node-server

Total PRs:
4,097 Dependabot PRs

Latest PR:
about 15 hours ago

Unique Repositories:
1,647 repositories

Unique Repos (30 days):
170 repositories

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

GHSA-92pp-h63x-v22m CVE-2026-39406 MODERATE published about 2 months ago • updated 5 days ago

## Summary A path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the req...

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

GHSA-hgxw-5xg3-69jx CVE-2024-32652 HIGH published about 2 years ago • updated about 19 hours ago

### Impact The application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those th...

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

GHSA-wc8c-qw6v-h7f6 CVE-2026-29087 HIGH published 3 months ago • updated 7 days ago

## Summary When using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting `/admin/*`), incon...

1.17.1 → 1.19.14 Minor PR

Open 3 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates

nikomatt69/nikcli #78

1.13.2 → 1.19.13 Minor PR

Closed 4 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates

GlacierEQ/langgraphjs #10

1.14.4 → 1.19.13 Minor PR

Open 4 days ago 4 comments

chore(deps): bump the npm-security-updates group across 1 directory with 11 updates

servrox-solutions/panana-predictions #87

1.13.2 → 1.19.14 Minor PR

Open 7 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates

nikomatt69/nikcli #68

1.13.2 → 1.19.13 Minor PR

Closed 7 days ago 4 comments

Bump the npm_and_yarn group across 5 directories with 10 updates

GlacierEQ/hyprnote #13

1.18.0 → 1.19.13 Minor PR

Open 13 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 13 updates

imrulo/ai #5

1.13.7 → 1.19.13 Minor PR

Open 13 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 8 directories with 10 updates

nikomatt69/nikcli #64

1.13.2 → 1.19.13 Minor PR

Closed 14 days ago 5 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

Sherlock999xxx/voltagent #77

1.18.2 → 1.19.13 Minor PR

Open 18 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 12 updates

witchinghourartcollective/hypersnap #1

1.14.1 → 1.19.14 Minor PR

Open 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

Sherlock999xxx/voltagent #76

1.18.2 → 1.19.13 Minor PR

Open 19 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 7 updates

michaelbjordanz/x402 #37

1.14.1 → 1.19.13 Minor PR

Closed 19 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 6 updates

khulnasoft/RustBolt #27

1.14.0 → 1.19.13 Minor PR

Closed 20 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates

nikomatt69/nikcli #61

1.13.2 → 1.19.13 Minor PR

Open 23 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 11 directories with 24 updates

GlacierEQ/langgraphjs #6

1.14.4 → 1.19.13 Minor PR

Open 23 days ago 2 comments

Bump the npm_and_yarn group across 4 directories with 9 updates

ANT0071/drizzle-orm #6

1.14.3 → 1.19.13 Minor PR

Closed 25 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 11 updates

aknibircse/dokploy-serverless #31

1.14.3 → 1.19.13 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 10 updates

aknibircse/dokploy-serverless #30

1.14.3 → 1.19.13 Minor PR

Closed about 1 month ago 1 comment

chore(deps): Update @hono/node-server requirement from ^1.13.7 to ^1.19.14

dhruvalgupta2003/paygate #33

^1.13.7 → ^1.19.14 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump @hono/node-server from 1.13.8 to 1.19.14

Ribs19/miniapps #1

1.13.8 → 1.19.14 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 8 updates

Activ8-AI/langgraph #20

1.17.1 → 1.19.14 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 14 directories with 18 updates

patrik-fredon/one #36

1.13.0 → 1.19.13 Minor PR

Open about 1 month ago 3 comments

Bump the npm_and_yarn group across 7 directories with 7 updates

NethermindEth/starkweb #94

1.13.7 → 1.19.14 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 27 directories with 9 updates

oshkoshbagoshh/audius-protocol #94

1.13.7 → 1.19.13 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 4 directories with 7 updates

khulnasoft/RustBolt #22

1.14.0 → 1.19.13 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump @hono/node-server from 1.14.3 to 1.19.14

do-dorio/comment2434-2 #886

1.14.3 → 1.19.14 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump @hono/node-server from 1.14.3 to 1.19.14

do-dorio/rsshub-comment2434 #1040

1.14.3 → 1.19.14 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump @hono/node-server from 1.13.8 to 1.19.14

SiqingYu/RSSHub #4533

1.13.8 → 1.19.14 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

AKJUS/6pm #31

1.12.2 → 1.19.13 Minor PR

Closed about 1 month ago 2 comments

chore(deps): Bump @hono/node-server from 1.12.0 to 1.19.13

amynaff/my-lunar-phase #26

1.12.0 → 1.19.13 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 16 updates

mpgxc/me-achaaa #4

1.13.7 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 12 updates

dporkka/dokploy-paas #4

1.14.3 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 14 updates

trizist/FrameworkBenchmarks #46

1.10.1 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 12 updates

HunterSides/sanguine #38

1.13.2 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 7 updates

xendit/mastra #88

1.17.1 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 34 directories with 6 updates

GlacierEQ/CopilotKit #163

1.13.8 → 1.19.13 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 35 directories with 6 updates

GlacierEQ/CopilotKit #162

1.13.8 → 1.19.13 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 6 updates

xendit/mastra #87

1.17.1 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 27 directories with 8 updates

oshkoshbagoshh/audius-protocol #77

1.13.7 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 7 updates

xendit/mastra #86

1.17.1 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 36 directories with 5 updates

c6ai/CopilotKit #85

1.13.8 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 37 directories with 5 updates

ANT0071/CopilotKit #156

1.13.8 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 37 directories with 4 updates

dholani/Copilot #146

1.13.8 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 37 directories with 4 updates

GlacierEQ/CopilotKit #157

1.13.8 → 1.19.13 Minor PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 9 updates

tanmay-pathak/dokploy #23

1.14.3 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 11 updates

aknibircse/dokploy-serverless #24

1.14.3 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 35 directories with 3 updates

dholani/CopilotKit #147

1.13.8 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 36 directories with 4 updates

GlacierEQ/CopilotKit #155

1.13.8 → 1.19.13 Minor PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 35 directories with 3 updates

dholani/Copilot #145

1.13.8 → 1.19.13 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 4 updates

idgrou/composio #269

1.13.2 → 1.19.13 Minor PR

Closed about 2 months ago 2 comments

Package Details

Name:	`@hono/node-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hono/node-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All npm Advisories

Package Information

Description:

Node.js Adapter for Hono

Repository:	https://github.com/honojs/node-server
Homepage:	https://github.com/honojs/node-server
Latest Release:	`1.14.4` 12 months ago
Dependent Repos:	34
Dependent Packages:	4
Downloads:	1,870,953
Ranking:	Top 2.2719% by dependent repos Top 1.5021% by downloads Top 4.4218% by dependent pkgs

PR Status

Open 1,956 (47.7%)

Merged 220 (5.4%)

Closed 1,701 (41.5%)

PR Types

Major 106 (2.6%)

Minor 1,404 (34.3%)

Patch 2,367 (57.8%)

@hono/node-server

Security Advisories

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

@hono/node-server cannot handle "double dots" in URL

Recent PRs (filtered by: Minor PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`@hono/node-server`