Vulnerabilities in KoaJS

6 results

CVE-2025-25200CRITICALKoa has Inefficient Regular Expression ComplexityEPSS 0.8%CVE-2026-27959HIGHKoa has Host Header Injection via `ctx.hostname`EPSS 0.3%CVE-2023-49803HIGH@koa/cors has overly permissive origin policyEPSS 0.3%CVE-2025-62595MEDIUMKoa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect LogicEPSS 0.3%CVE-2025-8129MEDIUMKoaJS Koa HTTP Header response.js back redirectEPSS 0.2%CVE-2025-32379MEDIUMXSS at ctx.redirect() function in KoajsEPSS 0.2%