{"action":"Upgrade @hono/node-server to 2.0.10 or later.","affected":[{"fixed":"2.0.10","introduced":"2.0.0"}],"component":"@hono/node-server","cve_ids":["CVE-2026-73565"],"ecosystem":"npm","epss":0.00529,"exploited":false,"fixed_versions":["2.0.10"],"ghsa_id":"GHSA-9mqv-5hh9-4cgg","id":"tcs_01M5KFGB975KDZ34DVSN1P7C75","modified_at":"2026-08-13T17:55:56.703914Z","published_at":"2026-07-21T22:04:27Z","references":["https://osv.dev/vulnerability/GHSA-9mqv-5hh9-4cgg","https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg","https://github.com/honojs/node-server/commit/3a21938c418340e980cb7ffa88e78369f78392d1","https://github.com/honojs/node-server","https://github.com/honojs/node-server/releases/tag/v2.0.10"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9mqv-5hh9-4cgg","url":"https://osv.dev/vulnerability/GHSA-9mqv-5hh9-4cgg"}],"summary":"Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake"}