Skip to content
OpenAdvisories

Package · npm

koa

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-62595

    Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic

    Koa is expressive middleware for Node.js using ES2017 async functions. In versions 2.16.2 to before 2.16.3 and 3.0.1 to before 3.0.3, a bypass to CVE-2025-8129 was discovered in the Koa.js framework affecting its back redirect functionality. In certain circum…

    koajs koa koa npm
  • Medium 5.0
    CVE-2025-32379

    XSS at ctx.redirect() function in Koajs

    Koa is expressive middleware for Node.js using ES2017 async functions. In koa < 2.16.1 and < 3.0.0-alpha.5, passing untrusted user input to ctx.redirect() even after sanitizing it, may execute javascript code on the user who use the app. This issue is patched…

    koajs koa koa npm