Skip to content

fix: upgrade hono and @hono/node-server to patch moderate vulnerabilities#5

Merged
Mutigen merged 1 commit intomainfrom
copilot/search-severity-vulnerabilities
Apr 9, 2026
Merged

fix: upgrade hono and @hono/node-server to patch moderate vulnerabilities#5
Mutigen merged 1 commit intomainfrom
copilot/search-severity-vulnerabilities

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 8, 2026

Summary

npm audit flagged 2 moderate-severity packages with 6 advisories total (path traversal, middleware bypass, cookie handling bypass, IP restriction bypass). Resolved via npm audit fix.

Changes

  • hono ≤4.12.11 → 4.12.12 (5 advisories: GHSA-r5rp, GHSA-xpcf, GHSA-26pp, GHSA-xf4j, GHSA-wmmm)
  • @hono/node-server <1.19.13 → 1.19.13 (1 advisory: GHSA-92pp)
  • Only package-lock.json modified — no source changes

Testing

  • npm run ci passes
  • Pack validation passes (npm run validate:packs)
  • npm audit returns 0 vulnerabilities
  • Full build (turbo run build) — 10/10 packages
  • Full test suite (turbo run test) — 16/16 tests across 8 packages

Related Issues

@Mutigen Mutigen merged commit 270f6da into main Apr 9, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants