KO
Vendor
koajs
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27959 | KO koa koajs | 7.5 | Feb 26 | Koa has Host Header Injection via `ctx.hostname` |
| CVE-2025-62595 | KO koa koajs | 6.1 | Oct 21 | Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic |
| CVE-2025-8129 | KO Koa Koajs | 6.1 | Jul 25 | A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0 |
| CVE-2025-32379 | KO Koa Koajs | 6.1 | Apr 9 | Koa is expressive middleware for Node.js using ES2017 async functions |
| CVE-2025-25200 | KO Koa Koajs | 7.5 | Feb 12 | Koa is expressive middleware for Node.js using ES2017 async functions |
| CVE-2023-49803 | CR Cross-origin Resource Sharing For Koa Koajs | 7.5 | Dec 11 | @koa/cors npm provides Cross-Origin Resource Sharing (CORS) for koa, a web framework for Node.js |