NO
Product
node-server
by honojs · last CVE Oct 28, 2026
4
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch

Add node-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-29087
7.5
0%
Mar 6
@hono/node-server: Authorization bypass for protected static paths via encoded slashes in Serve Static Middleware
Affected: < 1.19.10
Showing 1