Known vulnerabilities in koa
Vendor:
Koa.js
Software:
koa
Software CPE:
cpe:2.3:a:koa_js:koa:*:*:*:*:*:*:*:*
Website:
https://koajs.com/
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
3.3.0
3.2.1
3.2.0
3.1.2
2.16.4
3.1.1
3.1.0
3.0.3
2.16.3
3.0.2
2.16.2
3.0.1
0.21.2
3.0.0.5
3.0.0.4
3.0.0.3
3.0.0.2
3.0.0.1
3.0.0
2.16.1
2.16.0
2.15.4
2.15.3
2.15.2
2.15.1
2.15.0
2.14.2
2.14.1
2.14.0
2.13.4
2.13.3
2.13.2
2.13.1
2.13.0
2.12.1
2.12.0
2.11.0
2.10.0
2.9.0
2.8.2
2.8.1
2.8.0
2.7.0
2.6.2
2.6.1
2.6.0
2.5.3
2.5.2
2.5.1
2.5.0
2.4.1
2.4.0
2.3.0
2.2.0
2.1.0
2.0.1
2.0.0.8
2.0.0.7
2.0.0.6
2.0.0.5
2.0.0.4
2.0.0.3
2.0.0.2
2.0.0.1
2.0.0
1.7.1
1.7.0
1.6.2
1.6.1
1.6.0
1.5.1
1.5.0
1.4.1
1.4.0
1.3.0
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.2
1.1.1
1.1.0
1.0.0
0.21.1
0.21.0
0.20.0
0.19.1
0.19.0
0.18.1
0.18.0
0.17.0
0.16.0
0.15.0
0.14.0
0.13.0
0.12.2
0.12.1
0.12.0
0.11.0
0.10.0
0.9.0
0.8.2
0.8.1
0.8.0
0.7.0
0.6.3
0.6.2
0.6.1
0.6.0
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.0
0.3.0
0.2.1
0.2.0
0.1.2
0.1.1
0.1.0
0.0.2
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU162936 - Improper input validation CVE-2026-27959 |
CWE-20 | Medium | 2.16.4, 3.1.2 | 09.11.2026 |
SB20261109160 |
||
| #VU123130 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-8129 |
CWE-601 | Low | 3.0.0 | 23.02.2026 |
SB2026022332 |
||
| #VU117535 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-62595 |
CWE-601 | Low | 2.16.3, 3.0.3 | 22.10.2025 |
SB20251022157 |
||
| #VU162935 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-54420 |
CWE-601 | Medium | 2.16.2, 3.0.1 | 29.07.2025 |
SB2025072996 |
||
| #VU111996 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-32379 |
CWE-79 | Low | 2.16.1, 3.0.0.5 | 27.06.2025 |
SB2025062726 SB2025063009 |
||
| #VU108849 - Inefficient Regular Expression Complexity CVE-2025-25200 |
CWE-1333 | Critical | 0.21.2, 1.7.1, 2.15.4, 3.0.0.3 | 09.05.2025 |
SB2025050956 SB2025050957 |