koajs vulnerabilities
6 published CVEs name koajs among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-27959
Koa has Host Header Injection via `ctx.hostname`
koajs · koa
High7.5 - CVE-2025-62595
Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic
koajs · koa
Medium4.3 - CVE-2025-8129
KoaJS Koa HTTP Header response.js back redirect
KoaJS · Koa
Medium5.1 - CVE-2025-32379
XSS at ctx.redirect() function in Koajs
koajs · koa
Medium5.0 - CVE-2025-25200
Koa has Inefficient Regular Expression Complexity
koajs · koa
Critical9.2 - CVE-2023-49803
@koa/cors has overly permissive origin policy
koajs · cors
High8.6