koa 输入验证错误漏洞

koa is a Koa.js open source expressive middleware using node.js. An input validation error vulnerability exists in koa version 2.16.2 up to and including version 2.16.3 and version 3.0.1 up to and including version 3.0.3, which stems from incorrect handling of specially crafted URLs and can lead ...

PT-2025-42905

Name of the Vulnerable Software and Affected Versions Koa versions 2.16.2 through 2.16.3 Koa versions 3.0.1 through 3.0.3 Description The Koa framework contains a flaw in its back redirect functionality. An attacker can manipulate the Referer header to redirect a user’s browser to a malicious...

EUVD-2021-1124

Malware in sbrugna...

EUVD-2025-10545

Malicious code in bioql PyPI...

EUVD-2022-1164

Malicious code in bioql PyPI...

EUVD-2025-29497

Malicious code in bioql PyPI...

EUVD-2025-4086

Malicious code in bioql PyPI...

Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics

Summary There are vulnerabilities in Open Source Software OSS components consumed by IBM Planning Analytics. Additionally, IBM Planning Analytics is vulnerable to Cross-site scripting. This Security Bulletin relates only to the direct usage of third-party components by IBM Planning Analytics...

Embedded Malicious Code

Overview koa2-swagger-ui is a swagger ui for a koa v2 app Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It...

Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)

The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...

MAL-2025-44590 Malicious code in helmet-antares-meissa-koa (npm)

The package helmet-antares-meissa-koa was found to contain malicious code...

MAL-2025-45501 Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)

The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...

MAL-2025-43431 Malicious code in algol-koa-xenos-redis (npm)

The package algol-koa-xenos-redis was found to contain malicious code...

Malicious code in nucleosynthesis-lithosphere-koa-lacerta (npm)

The package nucleosynthesis-lithosphere-koa-lacerta was found to contain malicious code...

Malicious code in helmet-antares-meissa-koa (npm)

The package helmet-antares-meissa-koa was found to contain malicious code...

Malicious code in pino-pretty-antares-koa-carpo (npm)

The package pino-pretty-antares-koa-carpo was found to contain malicious code...

MAL-2025-45560 Malicious code in pino-pretty-antares-koa-carpo (npm)

The package pino-pretty-antares-koa-carpo was found to contain malicious code...

MAL-2025-45368 Malicious code in nucleosynthesis-lithosphere-koa-lacerta (npm)

The package nucleosynthesis-lithosphere-koa-lacerta was found to contain malicious code...

Access Control Bypass

Overview @koa/router is a Affected versions of this package are vulnerable to Access Control Bypass. due to the middleware being silently dropped from the execution chain when the router prefix contains path parameters. Depending on what the skipped middleware was supposed to protect, an attacker...

Open Redirect

Amendment This was deemed not a vulnerability. Overview org.webjars.npm:koa is a Koa web app framework Affected versions of this package are vulnerable to Open Redirect via the redirect function in lib/response.js due to improper input sanitization. An attacker can redirect users to arbitrary...