@hono/node-server vulnerabilities (npm)
6 vulnerabilities.
-
@hono/node-servernpm @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths 5.3 Medium -
@hono/node-servernpm @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake 5.3 Medium -
@hono/node-servernpm @hono/node-server has a middleware bypass via repeated slashes in serveStatic 5.3 Medium -
@hono/node-servernpm @hono/node-server: Authorization bypass for protected static paths via encoded slashes in Serve Static Middleware 7.5 High -
@hono/node-servernpm @hono/node-server contains Denial of Service risk when receiving Host header that cannot be parsed 7.5 High -
@hono/node-servernpm @hono/node-server can't handle "double dots" in URL 5.3 Medium