{"action":"Upgrade @hono/node-server to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"1.3.0"}],"component":"@hono/node-server","cve_ids":["CVE-2024-23340"],"ecosystem":"npm","epss":0.00722,"exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-rjq5-w47x-x359","id":"tcs_01M5KG9AV903RB04WB457BYKMX","modified_at":"2026-09-10T03:50:05.180372542Z","published_at":"2024-01-23T14:42:51Z","references":["https://osv.dev/vulnerability/GHSA-rjq5-w47x-x359","https://github.com/honojs/node-server/security/advisories/GHSA-rjq5-w47x-x359","https://nvd.nist.gov/vuln/detail/CVE-2024-23340","https://github.com/honojs/node-server/commit/dd9b9a9b23e3896403c90a740e7f1f0892feb402","https://github.com/honojs/node-server","https://github.com/honojs/node-server/blob/8cea466fd05e6d2e99c28011fc0e2c2d3f3397c9/src/request.ts#L43-L45"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rjq5-w47x-x359","url":"https://osv.dev/vulnerability/GHSA-rjq5-w47x-x359"}],"summary":"@hono/node-server cannot handle \"double dots\" in URL"}