CVE-2025-32379
1 advisory.
npm/koa CVE-2025-32379: medium 5, EPSS 0.26%
Koajs vulnerable to Cross-Site Scripting (XSS) at ctx.redirect() function
Action: Upgrade koa to 2.16.1 or later.
npm i koa@2.16.1npm i koa@3.0.0-alpha.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.16.1 | - |
| 3.0.0-alpha.1 | 3.0.0-alpha.5 | - |
Fixed versions
| 2.16.1 | 3.0.0-alpha.5 |
Sources
- osv: GHSA-x2rg-q646-7m2v
- https://github.com/koajs/koa/security/advisories/GHSA-x2rg-q646-7m2v
- https://nvd.nist.gov/vuln/detail/CVE-2025-32379
- https://github.com/koajs/koa/commit/ff25eb4a7f2392df46481fe86355161067687312
- https://github.com/koajs/koa
CVE-2025-32379 · published · modified · JSON