CVE-2025-62595

A flaw was found in Koa. A bypass of CVE-2025-8129 was discovered in the Koa.js framework affecting its back redirect functionality. In certain circumstances, an attacker can manipulate the Referer header to force a user’s browser to navigate to an external, potentially malicious website. This...

CVE-2025-62595

creationtimestamp| type| source ---|---|--- 2025-10-21 06:58:44+00:00| published-proof-of-concept| https://github.com/koajs/koa/security/advisories/GHSA-g8mr-fgfg-5qpc...