Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-27959 Koa is middleware for Node.js using ES2017 async functions. Prior to versions 3.1.2 and 2.16.4, Koa's `ctx.hostname` API performs naive parsing of th… Koa 2.16.4 / 3.1.2+ Fix from $1,9502026-02-26 MEDIUM 6.1 CVE-2025-62595 Koa is expressive middleware for Node.js using ES2017 async functions. In versions 2.16.2 to before 2.16.3 and 3.0.1 to before 3.0.3, a bypass to CVE… Koa 3.0.3+ Fix from $1,6002025-10-21 MEDIUM 6.1 CVE-2025-8129 A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.j… Koa 2.16.2+ Fix from $1,6002025-07-25 MEDIUM 6.1 CVE-2025-32379 Koa is expressive middleware for Node.js using ES2017 async functions. In koa < 2.16.1 and < 3.0.0-alpha.5, passing untrusted user input to ctx.redir… Koa 2.16.1+ Fix from $1,6002025-04-09 HIGH 7.5 CVE-2025-25200 Koa is expressive middleware for Node.js using ES2017 async functions. Prior to versions 0.21.2, 1.7.1, 2.15.4, and 3.0.0-alpha.3, Koa uses an evil r… Koa 0.21.2 / 1.7.1+ Fix from $1,9502025-02-12 HIGH 7.5 CVE-2023-49803 @koa/cors npm provides Cross-Origin Resource Sharing (CORS) for koa, a web framework for Node.js. Prior to version 5.0.0, the middleware operates in … Cross Origin Resource Sharing For Koa 5.0.0+ Fix from $1,9502023-12-11