CVE-2026-27959 | koajs koa up to 2.16.3/3.1.1 API ctx.hostname input validation (GHSA-7gcc-r8m5-44qm)

February 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in koajs koa up to 2.16.3/3.1.1. This vulnerability affects the function ctx.hostname of the component API. Executing a manipulation can lead to improper input validation.

The identification of this vulnerability is CVE-2026-27959. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More