tocsin

CVE-2025-25200

1 advisory.

npm/koa CVE-2025-25200: high 7.5, EPSS 0.84%

Inefficient Regular Expression Complexity in koa

Action: Upgrade koa to 0.21.2 or later.

npm i koa@2.15.4
npm i koa@3.0.0-alpha.3
npm i koa@1.7.1
npm i koa@0.21.2

Affected

introducedfixedlast affected
2.0.02.15.4-
3.0.0-alpha.03.0.0-alpha.3-
1.0.01.7.1-
00.21.2-

Fixed versions

2.15.43.0.0-alpha.31.7.10.21.2

Sources

CVE-2025-25200 · published · modified · JSON