npm/koa

Inefficient Regular Expression Complexity in koa

Modified: 2/12/2025

Koa has Host Header Injection via ctx.hostname

Modified: 2/26/2026

Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic

Modified: 2/3/2026

Koa Open Redirect via Referrer Header (User-Controlled)

Modified: 7/30/2025

Koajs vulnerable to Cross-Site Scripting (XSS) at ctx.redirect() function

Modified: 4/9/2025