📦 Koa

This vulnerability in Koa.js allows attackers to inject malicious hostnames via specially crafted HTTP Host headers containing '@' symbols. Applications using ctx.hostname for security-sensitive opera...

Koa middleware for Node.js versions prior to 0.21.2, 1.7.1, 2.15.4, and 3.0.0-alpha.3 contain a regular expression denial-of-service (ReDoS) vulnerability in how they parse X-Forwarded-Proto and X-For...

This CVE describes a URL redirect bypass vulnerability in Koa.js middleware for Node.js. Attackers can manipulate the Referer header to force user browsers to navigate to malicious external websites, ...

This vulnerability in Koa.js allows cross-site scripting (XSS) attacks when untrusted user input is passed to ctx.redirect() function, even after sanitization. Attackers can execute arbitrary JavaScri...