{"id":"ECHO-8231-af5b-7e28","upstream":["CVE-2025-25200","GHSA-593f-38f6-jp5m"],"severity":[],"modified":"2026-11-08T13:37:58.374Z","affected":[{"package":{"ecosystem":"Echo:npm","name":"koa","purl":"pkg:npm/koa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.15.0+echo.1"}]},{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.7.1"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.2"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2025-25200"},{"type":"WEB","url":"https://github.com/koajs/koa/security/advisories/GHSA-593f-38f6-jp5m"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25200"},{"type":"WEB","url":"https://github.com/koajs/koa/commit/5054af6e31ffd451a4151a1fe144cef6e5d0d83c"},{"type":"WEB","url":"https://github.com/koajs/koa/commit/5f294bb1c7c8d9c61904378d250439a321bffd32"},{"type":"WEB","url":"https://github.com/koajs/koa/commit/93fe903fc966635a991bcf890cfc3427d33a1a08"},{"type":"WEB","url":"https://github.com/koajs/koa/releases/tag/2.15.4"},{"type":"WEB","url":"https://github.com/advisories/GHSA-593f-38f6-jp5m"}]}