Koa Remove Trailing Slashes Project

koa-remove-trailing-slashes_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Koa Remove Trailing Slashes

koa-remove-trailing-slashes

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-23384 1Koa Remove Trailing Slashes Project 1Koa Remove Trailing Slashes Jun 17, 2026 May 17, 2021 N/A· v4 5.4 MEDIUM· v3 5.8 MEDIUM· v2 The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example...Show more The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example/). The vulnerable code is in index.js::removeTrailingSlashes(), as the web server uses relative URLs instead of absolute URLs.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-23384

1Koa Remove Trailing Slashes Project

1Koa Remove Trailing Slashes

Jun 17, 2026

May 17, 2021

N/A· v4

5.4 MEDIUM· v3

5.8 MEDIUM· v2

The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example/). The vulnerable code is in index.js::removeTrailingSlashes(), as the web server uses relative URLs instead of absolute URLs.Show less