CVE-2025-8129
1 advisory.
npm/koa CVE-2025-8129: low 3.5, EPSS 0.27%
Koa Open Redirect via Referrer Header (User-Controlled)
Action: Upgrade koa to 2.16.2 or later.
npm i koa@2.16.2npm i koa@3.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.16.2 | - |
| 3.0.0-alpha.0 | 3.0.1 | - |
Fixed versions
| 2.16.2 | 3.0.1 |
Sources
- osv: GHSA-jgmv-j7ww-jx2x
- https://github.com/koajs/koa/security/advisories/GHSA-jgmv-j7ww-jx2x
- https://nvd.nist.gov/vuln/detail/CVE-2025-54420
- https://github.com/koajs/koa/issues/1892
- https://github.com/koajs/koa/issues/1892#issue-3213028583
- https://github.com/koajs/koa/commit/422c551c63d00f24e2bbbdf492f262a5935bb1f0
- https://github.com/koajs/koa
- https://vuldb.com/?ctiid.317514
- https://vuldb.com/?id.317514
- https://vuldb.com/?submit.619741
CVE-2025-8129 · published · modified · JSON