Koajs Koa 3.0.0 Alpha 3 for Node.js
Approved changes feed: RSS · Atom
cpe:2.3:a:koajs:koa:3.0.0:alpha3:*:*:*:node.js:*:*
part: a version: 3.0.0 update: alpha3
| Vendor | Koajs (b257484d-9724-5405-ad62-508d7bec639f) |
|---|---|
| Product | Koa (6066500b-3581-5095-8439-89afd116bbd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/koajs/koa |
purl2cpe | 2026-06-01 10:12:48.309541 |
pkg:npm/koa |
purl2cpe | 2026-06-01 10:12:48.309543 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8129 |
vulnerable | 2026-06-08 07:45:19.678858 |
KoaJS Koa HTTP Header response.js back redirect
LOW (3.5)
A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js of the component HTTP Header Handler. The manipulation of the argument Referrer leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T04:02:05.418Z
Updated: 2025-07-25T12:01:53.033Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32379 |
vulnerable | 2026-06-08 07:18:59.695733 |
XSS at ctx.redirect() function in Koajs
MEDIUM (5)
Koa is expressive middleware for Node.js using ES2017 async functions. In koa < 2.16.1 and < 3.0.0-alpha.5, passing untrusted user input to ctx.redirect() even after sanitizing it, may execute javascript code on the user who use the app. This issue is patched in 2.16.1 and 3.0.0-alpha.5.
Published: 2025-04-09T15:56:40.574Z
Updated: 2025-04-09T20:45:15.899Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.