Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-9mqv-5hh9-4cgg
  • npm/@hono/node-server
Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake 21 Jul
  • Fix available
  • Severity - 5.3 (Medium)
CLEANSTART-2026-EE86998
  • CleanStart/langfuse-worker
Security fix for ghsa-9mqv-5hh9-4cgg applied in: langfuse-worker 3.194.1-r2, langfuse-worker 3.216.0-r2, langfuse-worker 3.217.0-r2, langfuse-worker 3.218.0-r2, langfuse-worker 3.219.0-r2, langfuse-worker 3.224.2-r2, langfuse-worker 3.225.0-r2 yesterday
  • Fix available
CVE-2026-73565
  • github.com/honojs/node-server
@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake 13 Aug
  • Fix available
  • Severity - 5.3 (Medium)