diff --git a/package-lock.json b/package-lock.json
index cd5743b..aa8fea5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,7 +11,7 @@
       "dependencies": {
         "@hono/zod-validator": "^0.8.0",
         "feed": "5.2.1",
-        "hono": "^4.11.7",
+        "hono": "4.12.22",
         "postal-mime": "^2.7.4",
         "zod": "4.4.3"
       },
@@ -3279,9 +3279,9 @@
       "license": "MIT"
     },
     "node_modules/hono": {
-      "version": "4.11.7",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.11.7.tgz",
-      "integrity": "sha512-l7qMiNee7t82bH3SeyUCt9UF15EVmaBvsppY2zQtrbIhl/yzBTny+YUxsVjSjQ6gaqaeVtZmGocom8TzBlA4Yw==",
+      "version": "4.12.22",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.22.tgz",
+      "integrity": "sha512-7fvVPbB92zNRsQke+uiRGwtTuef0tB2Dg4hWxYfFNvkQhIltWoyi0ONReM5LWA+jJWS3nfT5lTq+qbsIpX0IQw==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
diff --git a/package.json b/package.json
index 597a0b6..ecce602 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,7 @@
   "dependencies": {
     "@hono/zod-validator": "^0.8.0",
     "feed": "5.2.1",
-    "hono": "^4.11.7",
+    "hono": "4.12.22",
     "postal-mime": "^2.7.4",
     "zod": "4.4.3"
   }
diff --git a/src/routes/entries.ts b/src/routes/entries.ts
index 358c6a3..2a662d2 100644
--- a/src/routes/entries.ts
+++ b/src/routes/entries.ts
@@ -4,7 +4,7 @@ import { Env, FeedMetadata, EmailData } from "../types";
 
 export async function handle(c: Context<{ Bindings: Env }>): Promise<Response> {
   const feedId = c.req.param("feedId");
-  const receivedAt = parseInt(c.req.param("entryId"), 10);
+  const receivedAt = parseInt(c.req.param("entryId") ?? "", 10);
 
   if (!feedId || isNaN(receivedAt)) {
     return new Response("Not Found", { status: 404 });
diff --git a/src/routes/files.ts b/src/routes/files.ts
index 9bc2b9d..1af990c 100644
--- a/src/routes/files.ts
+++ b/src/routes/files.ts
@@ -9,6 +9,10 @@ export async function handle(c: Context<{ Bindings: Env }>): Promise<Response> {
   const attachmentId = c.req.param("attachmentId");
   const filename = c.req.param("filename");
 
+  if (!attachmentId || !filename) {
+    return new Response("Not found", { status: 404 });
+  }
+
   const object = await c.env.ATTACHMENT_BUCKET.get(attachmentId);
 
   if (!object) {