PkgSeer

Vulnerabilities

Last updated 49 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
@hono/node-server @hono/node-server: Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxy Medium Risk 5.3 19 hours ago 19 hours ago
@hono/node-server @hono/node-server: Unhandled `ECONNRESET` on the socket during an asynchronous WebSocket upgrade crashes the process Medium Risk 5.3 19 hours ago 19 hours ago
@hono/node-server @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths Medium Risk 5.3 15 days ago 15 days ago
@hono/node-server @hono/node-server: Middleware bypass via repeated slashes in serveStatic Medium Risk 5.3 7 months ago 2 months ago
@hono/node-server Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) Medium Risk 5.9 3 months ago 2 months ago
@hono/node-server @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware High Risk 7.5 8 months ago 2 months ago
@hono/node-server @hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed High Risk 7.5 2 years ago 2 months ago
@hono/node-server @hono/node-server cannot handle "double dots" in URL Medium Risk 5.3 2 years ago 2 months ago
@hono/node-server Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake Medium Risk 5.3 3 months ago 3 months ago
Data courtesy of OSV.dev
Page 1