A vulnerability, which was classified as problematic, was found in koajs koa up to 0.21.1/1.7.0/2.15.3/3.0.0-alpha.2. This affects an unknown part of the component ES2017. The manipulation leads to inefficient regular expression complexity.
This vulnerability is uniquely identified as CVE-2025-25200. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.