@rootio/koa vulnerabilities (Root)

4 vulnerabilities.

• @rootio/koa Root Koa has Host Header Injection via `ctx.hostname` CVE-2026-27959 Public exploitFix available 7.5 HighFebruary 26, 2026
• @rootio/koa Root KoaJS Koa HTTP Header response.js back redirect CVE-2025-8129 Fix available 5.1 MediumJuly 25, 2025
• @rootio/koa Root XSS at ctx.redirect() function in Koajs CVE-2025-32379 Fix available 5.0 MediumApril 9, 2025
• @rootio/koa Root Koa has Inefficient Regular Expression Complexity CVE-2025-25200 Public exploitFix available 9.2 CriticalFebruary 12, 2025