KO
Vendor
koajs
7
CVEs
0
On KEV
0
New 30D
Products
KO7.5
koa
koajs
5 CVEs0 on KEV0 new
CO7.5
cors
koajs
1 CVEs0 on KEV0 new
CR7.5
Cross-origin Resource Sharing For Koa
Koajs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27959 | KO koa koajs | 7.5 | Feb 26 | Koa has Host Header Injection via `ctx.hostname` |
| CVE-2025-62595 | KO koa koajs | 6.1 | Oct 21 | Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic |
| CVE-2025-8129 | KO Koa KoaJS | 6.1 | Jul 25 | KoaJS Koa HTTP Header response.js back redirect |
| CVE-2025-32379 | KO koa koajs | 6.1 | Apr 9 | XSS at ctx.redirect() function in Koajs |
| CVE-2025-25200 | KO koa koajs | 7.5 | Feb 12 | Koa has Inefficient Regular Expression Complexity |
| CVE-2023-49803 | CO cors koajs | 7.5 | Dec 11 | @koa/cors has overly permissive origin policy |