node-server vulnerabilities

CVEs whose affected-version data names the node-server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73565Medium· 5.3

1mo ago

@hono/node-server allows running the Hono application on Node.js

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain th…

▾ Sunlithonojs · node-serverEPSS 0.39%via NVD