427 matches found
Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)
The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...
MAL-2025-45501 Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)
The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...
MAL-2025-44590 Malicious code in helmet-antares-meissa-koa (npm)
The package helmet-antares-meissa-koa was found to contain malicious code...
MAL-2025-43431 Malicious code in algol-koa-xenos-redis (npm)
The package algol-koa-xenos-redis was found to contain malicious code...
Malicious code in nucleosynthesis-lithosphere-koa-lacerta (npm)
The package nucleosynthesis-lithosphere-koa-lacerta was found to contain malicious code...
Malicious code in helmet-antares-meissa-koa (npm)
The package helmet-antares-meissa-koa was found to contain malicious code...
Malicious code in pino-pretty-antares-koa-carpo (npm)
The package pino-pretty-antares-koa-carpo was found to contain malicious code...
MAL-2025-45560 Malicious code in pino-pretty-antares-koa-carpo (npm)
The package pino-pretty-antares-koa-carpo was found to contain malicious code...
MAL-2025-45368 Malicious code in nucleosynthesis-lithosphere-koa-lacerta (npm)
The package nucleosynthesis-lithosphere-koa-lacerta was found to contain malicious code...
Access Control Bypass
Overview @koa/router is a Affected versions of this package are vulnerable to Access Control Bypass. due to the middleware being silently dropped from the execution chain when the router prefix contains path parameters. Depending on what the skipped middleware was supposed to protect, an attacker...
2dev (0.1.3), @actualwave/traceability-matrices (1.0.7) +51 more potentially affected by CVE-2026-9495 via @koa/router (14.0.0)
@koa/router NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @koa/router and may be impacted: - 2dev 0.1.3 - @actualwave/traceability-matrices 1.0.7 - @bbc/sofie-server-core-integration...
Open Redirect
Amendment This was deemed not a vulnerability. Overview org.webjars.npm:koa is a Koa web app framework Affected versions of this package are vulnerable to Open Redirect via the redirect function in lib/response.js due to improper input sanitization. An attacker can redirect users to arbitrary...
02.koa-demo (1.0.0), 0510test (1.0.0) +13574 more potentially affected by unknown CVE via koa (>=0.0.1, <=3.2.1)
koa NPM version =0.0.1, =1.3.7, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - 2-26 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA-12143256...
Open Redirect
Overview koa is a Koa web app framework Affected versions of this package are vulnerable to Open Redirect via the redirect function in lib/response.js due to improper input sanitization. An attacker can redirect users to arbitrary external sites by exploiting this vulnerability. Remediation A fix...
Malicious code in cashfree-pg-koa-app (npm)
The package cashfree-pg-koa-app was found to contain malicious code...
Malicious code in yakutsk-pyxis-polaris-koa (npm)
The package yakutsk-pyxis-polaris-koa was found to contain malicious code...
Malicious code in koa-mq (npm)
The package koa-mq was found to contain malicious code...
Malicious code in radiometric-koa-avior-nebula (npm)
The package radiometric-koa-avior-nebula was found to contain malicious code...