Skip to content

chore(deps): hono, ajv alerts#2639

Open
DerekRoberts wants to merge 5 commits intomainfrom
chore/deps/hono
Open

chore(deps): hono, ajv alerts#2639
DerekRoberts wants to merge 5 commits intomainfrom
chore/deps/hono

Conversation

@DerekRoberts
Copy link
Member

@DerekRoberts DerekRoberts commented Mar 11, 2026

  • chore(ci): alerts
  • Cleanup and lockfile

Thanks for the PR!

Deployments, as required, will be available below:

Please create PRs in draft mode. Mark as ready to enable:

After merge, new images are deployed in:

Comment on lines +2369 to +2380
"node_modules/@prisma/dev/node_modules/@hono/node-server": {
"version": "1.19.9",
"resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.9.tgz",
"integrity": "sha512-vHL6w3ecZsky+8P5MD+eFfaGTyCeOHUIFYMGpQGbrBTSmNNoxv0if69rEZ5giu36weC5saFuznL411gRX7bJDw==",
"license": "MIT",
"engines": {
"node": ">=18.14.1"
},
"peerDependencies": {
"hono": "^4"
}
},

Check failure

Code scanning / Trivy

@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware High

Package: @hono/node-server
Installed Version: 1.19.9
Vulnerability CVE-2026-29087
Severity: HIGH
Fixed Version: 1.19.10
Link: CVE-2026-29087
@DerekRoberts DerekRoberts changed the title chore/deps/hono chore(deps): hono, ajv alerts Mar 11, 2026
@socket-security
Copy link

socket-security bot commented Mar 11, 2026

@DerekRoberts DerekRoberts moved this from New to Active in DevOps (NR) Mar 11, 2026
@DerekRoberts DerekRoberts self-assigned this Mar 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Active

Development

Successfully merging this pull request may close these issues.

1 participant