Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kpxd-8x1w-p3gw
Summary@hono/node-server allows running the Hono application on Node.js. Prior to 1.19.13, a path handling inconsistency in serveStatic allows protected static files to be accessed by using repeated slashes (//) in the request path. When route-based middleware (e.g., /admin/*) is used for authorization, the router may not match paths containing repeated slashes, while serveStatic resolves them as normalized paths. This can lead to a middleware bypass. This vulnerability is fixed in 1.19.13.
Aliases
0
alias CVE-2026-39406
1
alias GHSA-92pp-h63x-v22m
Fixed_packages
0
url pkg:npm/%40hono/node-server@1.19.13
purl pkg:npm/%40hono/node-server@1.19.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.13
Affected_packages
0
url pkg:npm/%40hono/node-server@0.2.0
purl pkg:npm/%40hono/node-server@0.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.2.0
1
url pkg:npm/%40hono/node-server@0.2.1
purl pkg:npm/%40hono/node-server@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.2.1
2
url pkg:npm/%40hono/node-server@0.2.2
purl pkg:npm/%40hono/node-server@0.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.2.2
3
url pkg:npm/%40hono/node-server@0.2.3
purl pkg:npm/%40hono/node-server@0.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.2.3
4
url pkg:npm/%40hono/node-server@0.2.4
purl pkg:npm/%40hono/node-server@0.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.2.4
5
url pkg:npm/%40hono/node-server@0.3.0
purl pkg:npm/%40hono/node-server@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.3.0
6
url pkg:npm/%40hono/node-server@0.4.0
purl pkg:npm/%40hono/node-server@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.4.0
7
url pkg:npm/%40hono/node-server@0.5.0
purl pkg:npm/%40hono/node-server@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.5.0
8
url pkg:npm/%40hono/node-server@0.5.1
purl pkg:npm/%40hono/node-server@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.5.1
9
url pkg:npm/%40hono/node-server@0.6.0
purl pkg:npm/%40hono/node-server@0.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@0.6.0
10
url pkg:npm/%40hono/node-server@1.0.0-rc.1
purl pkg:npm/%40hono/node-server@1.0.0-rc.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.0.0-rc.1
11
url pkg:npm/%40hono/node-server@1.0.0
purl pkg:npm/%40hono/node-server@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.0.0
12
url pkg:npm/%40hono/node-server@1.0.1
purl pkg:npm/%40hono/node-server@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.0.1
13
url pkg:npm/%40hono/node-server@1.0.2
purl pkg:npm/%40hono/node-server@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.0.2
14
url pkg:npm/%40hono/node-server@1.1.0
purl pkg:npm/%40hono/node-server@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.1.0
15
url pkg:npm/%40hono/node-server@1.1.1
purl pkg:npm/%40hono/node-server@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.1.1
16
url pkg:npm/%40hono/node-server@1.2.0
purl pkg:npm/%40hono/node-server@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.2.0
17
url pkg:npm/%40hono/node-server@1.2.1
purl pkg:npm/%40hono/node-server@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.2.1
18
url pkg:npm/%40hono/node-server@1.2.2
purl pkg:npm/%40hono/node-server@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.2.2
19
url pkg:npm/%40hono/node-server@1.2.3
purl pkg:npm/%40hono/node-server@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.2.3
20
url pkg:npm/%40hono/node-server@1.3.0
purl pkg:npm/%40hono/node-server@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep46-stqg-f3g8
1
vulnerability VCID-kpxd-8x1w-p3gw
2
vulnerability VCID-te24-9ce4-g7gx
3
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.3.0
21
url pkg:npm/%40hono/node-server@1.3.1
purl pkg:npm/%40hono/node-server@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep46-stqg-f3g8
1
vulnerability VCID-kpxd-8x1w-p3gw
2
vulnerability VCID-te24-9ce4-g7gx
3
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.3.1
22
url pkg:npm/%40hono/node-server@1.3.2
purl pkg:npm/%40hono/node-server@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep46-stqg-f3g8
1
vulnerability VCID-kpxd-8x1w-p3gw
2
vulnerability VCID-te24-9ce4-g7gx
3
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.3.2
23
url pkg:npm/%40hono/node-server@1.3.3
purl pkg:npm/%40hono/node-server@1.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep46-stqg-f3g8
1
vulnerability VCID-kpxd-8x1w-p3gw
2
vulnerability VCID-te24-9ce4-g7gx
3
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.3.3
24
url pkg:npm/%40hono/node-server@1.3.4
purl pkg:npm/%40hono/node-server@1.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep46-stqg-f3g8
1
vulnerability VCID-kpxd-8x1w-p3gw
2
vulnerability VCID-te24-9ce4-g7gx
3
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.3.4
25
url pkg:npm/%40hono/node-server@1.3.5
purl pkg:npm/%40hono/node-server@1.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep46-stqg-f3g8
1
vulnerability VCID-kpxd-8x1w-p3gw
2
vulnerability VCID-te24-9ce4-g7gx
3
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.3.5
26
url pkg:npm/%40hono/node-server@1.4.0
purl pkg:npm/%40hono/node-server@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep46-stqg-f3g8
1
vulnerability VCID-kpxd-8x1w-p3gw
2
vulnerability VCID-te24-9ce4-g7gx
3
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.4.0
27
url pkg:npm/%40hono/node-server@1.4.1
purl pkg:npm/%40hono/node-server@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.4.1
28
url pkg:npm/%40hono/node-server@1.5.0
purl pkg:npm/%40hono/node-server@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.5.0
29
url pkg:npm/%40hono/node-server@1.6.0
purl pkg:npm/%40hono/node-server@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.6.0
30
url pkg:npm/%40hono/node-server@1.7.0
purl pkg:npm/%40hono/node-server@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.7.0
31
url pkg:npm/%40hono/node-server@1.8.0
purl pkg:npm/%40hono/node-server@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.8.0
32
url pkg:npm/%40hono/node-server@1.8.1
purl pkg:npm/%40hono/node-server@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.8.1
33
url pkg:npm/%40hono/node-server@1.8.2
purl pkg:npm/%40hono/node-server@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.8.2
34
url pkg:npm/%40hono/node-server@1.9.0
purl pkg:npm/%40hono/node-server@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.9.0
35
url pkg:npm/%40hono/node-server@1.9.1
purl pkg:npm/%40hono/node-server@1.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.9.1
36
url pkg:npm/%40hono/node-server@1.10.0
purl pkg:npm/%40hono/node-server@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
2
vulnerability VCID-w4x5-48p7-8fhc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.10.0
37
url pkg:npm/%40hono/node-server@1.10.1
purl pkg:npm/%40hono/node-server@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.10.1
38
url pkg:npm/%40hono/node-server@1.11.0
purl pkg:npm/%40hono/node-server@1.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.11.0
39
url pkg:npm/%40hono/node-server@1.11.1
purl pkg:npm/%40hono/node-server@1.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.11.1
40
url pkg:npm/%40hono/node-server@1.11.2
purl pkg:npm/%40hono/node-server@1.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.11.2
41
url pkg:npm/%40hono/node-server@1.11.3
purl pkg:npm/%40hono/node-server@1.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.11.3
42
url pkg:npm/%40hono/node-server@1.11.4
purl pkg:npm/%40hono/node-server@1.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.11.4
43
url pkg:npm/%40hono/node-server@1.11.5
purl pkg:npm/%40hono/node-server@1.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.11.5
44
url pkg:npm/%40hono/node-server@1.12.0
purl pkg:npm/%40hono/node-server@1.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.12.0
45
url pkg:npm/%40hono/node-server@1.12.1
purl pkg:npm/%40hono/node-server@1.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.12.1
46
url pkg:npm/%40hono/node-server@1.12.2
purl pkg:npm/%40hono/node-server@1.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.12.2
47
url pkg:npm/%40hono/node-server@1.13.0
purl pkg:npm/%40hono/node-server@1.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.0
48
url pkg:npm/%40hono/node-server@1.13.1
purl pkg:npm/%40hono/node-server@1.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.1
49
url pkg:npm/%40hono/node-server@1.13.2
purl pkg:npm/%40hono/node-server@1.13.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.2
50
url pkg:npm/%40hono/node-server@1.13.3
purl pkg:npm/%40hono/node-server@1.13.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.3
51
url pkg:npm/%40hono/node-server@1.13.4
purl pkg:npm/%40hono/node-server@1.13.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.4
52
url pkg:npm/%40hono/node-server@1.13.5
purl pkg:npm/%40hono/node-server@1.13.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.5
53
url pkg:npm/%40hono/node-server@1.13.6
purl pkg:npm/%40hono/node-server@1.13.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.6
54
url pkg:npm/%40hono/node-server@1.13.7
purl pkg:npm/%40hono/node-server@1.13.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.7
55
url pkg:npm/%40hono/node-server@1.13.8
purl pkg:npm/%40hono/node-server@1.13.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.13.8
56
url pkg:npm/%40hono/node-server@1.14.0
purl pkg:npm/%40hono/node-server@1.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.14.0
57
url pkg:npm/%40hono/node-server@1.14.1
purl pkg:npm/%40hono/node-server@1.14.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.14.1
58
url pkg:npm/%40hono/node-server@1.14.2
purl pkg:npm/%40hono/node-server@1.14.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.14.2
59
url pkg:npm/%40hono/node-server@1.14.3
purl pkg:npm/%40hono/node-server@1.14.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.14.3
60
url pkg:npm/%40hono/node-server@1.14.4
purl pkg:npm/%40hono/node-server@1.14.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.14.4
61
url pkg:npm/%40hono/node-server@1.15.0
purl pkg:npm/%40hono/node-server@1.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.15.0
62
url pkg:npm/%40hono/node-server@1.16.0
purl pkg:npm/%40hono/node-server@1.16.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.16.0
63
url pkg:npm/%40hono/node-server@1.17.0
purl pkg:npm/%40hono/node-server@1.17.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.17.0
64
url pkg:npm/%40hono/node-server@1.17.1
purl pkg:npm/%40hono/node-server@1.17.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.17.1
65
url pkg:npm/%40hono/node-server@1.18.0
purl pkg:npm/%40hono/node-server@1.18.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.18.0
66
url pkg:npm/%40hono/node-server@1.18.1
purl pkg:npm/%40hono/node-server@1.18.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.18.1
67
url pkg:npm/%40hono/node-server@1.18.2
purl pkg:npm/%40hono/node-server@1.18.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.18.2
68
url pkg:npm/%40hono/node-server@1.19.0
purl pkg:npm/%40hono/node-server@1.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.0
69
url pkg:npm/%40hono/node-server@1.19.1
purl pkg:npm/%40hono/node-server@1.19.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.1
70
url pkg:npm/%40hono/node-server@1.19.2
purl pkg:npm/%40hono/node-server@1.19.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.2
71
url pkg:npm/%40hono/node-server@1.19.3
purl pkg:npm/%40hono/node-server@1.19.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.3
72
url pkg:npm/%40hono/node-server@1.19.4
purl pkg:npm/%40hono/node-server@1.19.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.4
73
url pkg:npm/%40hono/node-server@1.19.5
purl pkg:npm/%40hono/node-server@1.19.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.5
74
url pkg:npm/%40hono/node-server@1.19.6
purl pkg:npm/%40hono/node-server@1.19.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.6
75
url pkg:npm/%40hono/node-server@1.19.7
purl pkg:npm/%40hono/node-server@1.19.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.7
76
url pkg:npm/%40hono/node-server@1.19.8
purl pkg:npm/%40hono/node-server@1.19.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.8
77
url pkg:npm/%40hono/node-server@1.19.9
purl pkg:npm/%40hono/node-server@1.19.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
1
vulnerability VCID-te24-9ce4-g7gx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.9
78
url pkg:npm/%40hono/node-server@1.19.10
purl pkg:npm/%40hono/node-server@1.19.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.10
79
url pkg:npm/%40hono/node-server@1.19.11
purl pkg:npm/%40hono/node-server@1.19.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.11
80
url pkg:npm/%40hono/node-server@1.19.12
purl pkg:npm/%40hono/node-server@1.19.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kpxd-8x1w-p3gw
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540hono/node-server@1.19.12
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-39406
reference_id
reference_type
scores
0
value 0.00019
scoring_system epss
scoring_elements 0.05556
published_at 2026-06-13T12:55:00Z
1
value 0.00019
scoring_system epss
scoring_elements 0.05548
published_at 2026-06-14T12:55:00Z
2
value 0.00019
scoring_system epss
scoring_elements 0.05536
published_at 2026-06-11T12:55:00Z
3
value 0.00019
scoring_system epss
scoring_elements 0.05562
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-39406
1
reference_url https://github.com/honojs/node-server
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/honojs/node-server
2
reference_url https://github.com/honojs/node-server/commit/025c30f55d589ddbe6048b151d77e904f67a8cc2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/honojs/node-server/commit/025c30f55d589ddbe6048b151d77e904f67a8cc2
3
reference_url https://github.com/honojs/node-server/releases/tag/v1.19.13
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/honojs/node-server/releases/tag/v1.19.13
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-39406
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-39406
5
reference_url https://github.com/advisories/GHSA-92pp-h63x-v22m
reference_id GHSA-92pp-h63x-v22m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-92pp-h63x-v22m
6
reference_url https://github.com/honojs/node-server/security/advisories/GHSA-92pp-h63x-v22m
reference_id GHSA-92pp-h63x-v22m
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-08T15:17:32Z/
url https://github.com/honojs/node-server/security/advisories/GHSA-92pp-h63x-v22m
Weaknesses
0
cwe_id 22
name Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kpxd-8x1w-p3gw