What’s Vulnerable › Products

koajs koa vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your koajs koa version is affected

Latest koajs koa vulnerabilities

• CVE-2026-27959 — Koa has Host Header Injection via `ctx.hostname` (CVSS 7.5)
• CVE-2025-62595 — Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic (CVSS 6.1)
• CVE-2025-8129 — KoaJS Koa HTTP Header response.js back redirect (CVSS 6.1)
• CVE-2025-32379 — XSS at ctx.redirect() function in Koajs (CVSS 6.1)
• CVE-2025-25200 — Koa has Inefficient Regular Expression Complexity (CVSS 7.5)