npm/@hono/node-server CVE-2026-73565: medium 5.3, EPSS 0.53%
Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake
Action: Upgrade @hono/node-server to 2.0.10 or later.
npm i @hono/node-server@2.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.10 | - |
Fixed versions
| 2.0.10 |
Sources
- osv: GHSA-9mqv-5hh9-4cgg
- https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg
- https://github.com/honojs/node-server/commit/3a21938c418340e980cb7ffa88e78369f78392d1
- https://github.com/honojs/node-server
- https://github.com/honojs/node-server/releases/tag/v2.0.10
CVE-2026-73565 · published · modified · JSON