koa vulnerabilities

CVEs whose affected-version data names the koa package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-62595Medium· 4.3

11mo ago

Koa is expressive middleware for Node.js using ES2017 async functions

Koa is expressive middleware for Node.js using ES2017 async functions. In versions 2.16.2 to before 2.16.3 and 3.0.1 to before 3.0.3, a bypass to CVE-2025-8129 was discovered in the Koa.js framework affecting its back redirect functional…

▾ Sunlitkoajs · koaEPSS 0.29%via NVD