koajs koa vulnerabilities
5 published CVEs name koajs koa among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-27959
Koa has Host Header Injection via `ctx.hostname`
koajs · koa
High7.5 - CVE-2025-62595
Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic
koajs · koa
Medium4.3 - CVE-2025-8129
KoaJS Koa HTTP Header response.js back redirect
KoaJS · Koa
Medium5.1 - CVE-2025-32379
XSS at ctx.redirect() function in Koajs
koajs · koa
Medium5.0 - CVE-2025-25200
Koa has Inefficient Regular Expression Complexity
koajs · koa
Critical9.2