Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@hono/node-server

npm

Node.js Adapter for Hono

View on github.com · View on npmjs.org

Security Advisories for @hono/node-server in npm

Moderate
10 days ago

Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake GSA_kwCzR0hTQS05bXF2LTVoaDktNGNnZ84ABfLn

npm @hono/node-server
Moderate
10 days ago

Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) GSA_kwCzR0hTQS1mcnZwLTdjNjctMzl3Oc4ABfIU

npm @hono/node-server
Moderate
4 months ago

@hono/node-server: Middleware bypass via repeated slashes in serveStatic GSA_kwCzR0hTQS05MnBwLWg2M3gtdjIybc4ABU3k

npm @hono/node-server
High
5 months ago

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware GSA_kwCzR0hTQS13YzhjLXF3NnYtaDdmNs4ABTIV

npm @hono/node-server
High
over 2 years ago

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed GSA_kwCzR0hTQS1oZ3h3LTV4ZzMtNjlqeM4AA7Nw

npm @hono/node-server
Moderate
over 2 years ago

@hono/node-server cannot handle "double dots" in URL GSA_kwCzR0hTQS1yanE1LXc0N3gteDM1Oc4AA4oP

npm @hono/node-server

Filter by Severity

Moderate 4 High 2