honojs node-server

• CVE-2026-118663 Medium 5.3 @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths 0.4%
• CVE-2026-73565 Medium 5.3 @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake 0.5%
• CVE-2026-39406 Medium 5.3 @hono/node-server has a middleware bypass via repeated slashes in serveStatic 0.4%
• CVE-2026-29087 High 7.5 @hono/node-server: Authorization bypass for protected static paths via encoded slashes in Serve Static Middleware 0.4%
• CVE-2024-32652 High 7.5 @hono/node-server contains Denial of Service risk when receiving Host header that cannot be parsed 0.9%
• CVE-2024-23340 Medium 5.3 @hono/node-server can't handle "double dots" in URL 0.7%