@hono/node-server
Node.js Adapter for Hono
92%
Total Score
healthy
Regular releases, active contributors, and verified publishing support a healthy dependency.
Health Score Breakdown
The project uses TypeScript, Vitest, and npm scripts, showing a defined build and test toolchain. No security scanning tools were detected, leaving a modest security-process gap.
The repository has no security policy. This reduces transparency for vulnerability reporting, although the active project and provenance evidence partly compensate.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-999858 New @hono/node-server is vulnerable to Authentication Bypass in versions 0.0.1 - 2.1.2. | 0.0.1 - 2.1.2 | Medium |
AIKIDO-2026-995117 @hono/node-server is vulnerable to Denial of Service (DoS) in versions 2.0.0 - 2.0.9. | 2.0.0 - 2.0.9 | Medium |
AIKIDO-2026-120510 @hono/node-server is vulnerable to Path Traversal in versions 0.2.0 - 1.19.14 and 2.0.0 - 2.0.4. | 0.2.0 - 1.19.142.0.0 - 2.0.4 | Medium |
CVE-2026-39406 @hono/node-server is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 1.19.13. | 0.0.0 - 1.19.13 | Medium |
CVE-2026-29087 @hono/node-server is vulnerable to Incorrect Authorization in versions 0.0.0 - 1.19.10. | 0.0.0 - 1.19.10 | High |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.