Koajs Koa 3.0.0 Alpha 5 for Node.js
Approved changes feed: RSS · Atom
cpe:2.3:a:koajs:koa:3.0.0:alpha5:*:*:*:node.js:*:*
part: a version: 3.0.0 update: alpha5
| Vendor | Koajs (b257484d-9724-5405-ad62-508d7bec639f) |
|---|---|
| Product | Koa (6066500b-3581-5095-8439-89afd116bbd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/koajs/koa |
purl2cpe | 2026-06-01 10:12:48.309547 |
pkg:npm/koa |
purl2cpe | 2026-06-01 10:12:48.309548 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8129 |
vulnerable | 2026-06-08 07:45:19.680661 |
KoaJS Koa HTTP Header response.js back redirect
LOW (3.5)
A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js of the component HTTP Header Handler. The manipulation of the argument Referrer leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T04:02:05.418Z
Updated: 2025-07-25T12:01:53.033Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.