The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example…
CVSS 3.1MEDIUM 5.4·Network·No auth·User interaction·EPSS 0.00835·Published 2021-05-17·Fixed in 2.0.2CWE-601