@hono/node-server vulnerabilities (TuxCare)
3 vulnerabilities.
-
@hono/node-serverTuxCare @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths 5.3 Medium -
@hono/node-serverTuxCare @hono/node-server has a middleware bypass via repeated slashes in serveStatic 5.3 Medium -
@hono/node-serverTuxCare @hono/node-server: Authorization bypass for protected static paths via encoded slashes in Serve Static Middleware 7.5 High