{"action":"Upgrade koa to 0.21.2 or later.","affected":[{"fixed":"2.15.4","introduced":"2.0.0"},{"fixed":"3.0.0-alpha.3","introduced":"3.0.0-alpha.0"},{"fixed":"1.7.1","introduced":"1.0.0"},{"fixed":"0.21.2","introduced":"0"}],"component":"koa","cve_ids":["CVE-2025-25200"],"ecosystem":"npm","epss":0.00841,"exploited":false,"fixed_versions":["2.15.4","3.0.0-alpha.3","1.7.1","0.21.2"],"ghsa_id":"GHSA-593f-38f6-jp5m","id":"tcs_01M5KF35TERXYGN2YFKP6C7V4Z","modified_at":"2025-02-12T19:27:07.225487Z","published_at":"2025-02-12T19:23:09Z","references":["https://osv.dev/vulnerability/GHSA-593f-38f6-jp5m","https://github.com/koajs/koa/security/advisories/GHSA-593f-38f6-jp5m","https://nvd.nist.gov/vuln/detail/CVE-2025-25200","https://github.com/koajs/koa/commit/5054af6e31ffd451a4151a1fe144cef6e5d0d83c","https://github.com/koajs/koa/commit/5f294bb1c7c8d9c61904378d250439a321bffd32","https://github.com/koajs/koa/commit/93fe903fc966635a991bcf890cfc3427d33a1a08","https://github.com/koajs/koa","https://github.com/koajs/koa/releases/tag/2.15.4"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-593f-38f6-jp5m","url":"https://osv.dev/vulnerability/GHSA-593f-38f6-jp5m"},{"source":"nvd","source_id":"CVE-2025-25200","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25200"}],"summary":"Inefficient Regular Expression Complexity in koa"}