@adonisjs/http-server

AdonisJS HTTP server with support packed with Routing and Cookies

Latest 9.3.1

NPM

92%

Total Score

healthy

Healthy release with active maintenance, verified publishing, and only a contained workflow-permission concern.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All four workflows were analyzed with no untrusted checkouts or script injection; however, one high-confidence medium-severity secrets-inherit finding and three of eight unpinned actions are workflow hygiene concerns.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-422403 @adonisjs/http-server is vulnerable to Open Redirect in versions 0.0.1 - 8.2.2 and 9.0.0 - 9.2.0.	0.0.1 - 8.2.29.0.0 - 9.2.0	Medium
AIKIDO-2026-651997 @adonisjs/http-server is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 0.0.1 - 8.2.1 and 9.0.0 - 9.1.0.	0.0.1 - 8.2.19.0.0 - 9.1.0	Medium
AIKIDO-2026-334058 @adonisjs/http-server is vulnerable to Cross-Site Scripting (XSS) in versions 8.0.0 - 8.2.0 and 9.0.0 - 9.0.2.	8.0.0 - 8.2.09.0.0 - 9.0.2	Medium
CVE-2026-40255 @adonisjs/http-server is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 8.0.0-next.0 - 8.2.0 and 0.0.0 - 7.8.1.	0.0.0 - 7.8.18.0.0-next.0 - 8.2.0	Medium