KO
Product
koa
by koajs · last CVE Feb 26, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch

Add koa to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-62595
6.1
0%
Oct 21
Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic
Affected: >= 2.16.2, < 2.16.3; >= 3.0.1, < 3.0.3
CVE-2025-8129
6.1
0%
Jul 25
KoaJS Koa HTTP Header response.js back redirect
Affected: 3.0
CVE-2025-32379
6.1
0%
Apr 9
Koa is expressive middleware for Node.js using ES2017 async functions
Affected: before 2.16.1; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0
Showing 3