VendorsKoajskoaall versions
Vulnerabilities

Koajs Koa

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2025-25200
Koa has Inefficient Regular Expression Complexity
Published 2025-02-12 · Analyzed
9.2EPSS 0.008
CVE-2026-27959
Koa has Host Header Injection via `ctx.hostname`
Published 2026-02-26 · Modified
8.2EPSS 0.005
CVE-2025-62595
Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic
Published 2025-10-21 · Analyzed
6.1EPSS 0.003
CVE-2025-32379
XSS at ctx.redirect() function in Koajs
Published 2025-04-09 · Analyzed
6.1EPSS 0.003
CVE-2025-8129
KoaJS Koa HTTP Header response.js back redirect
Published 2025-07-25 · Analyzed
6.1EPSS 0.002