TI-2026-59956 CVE-2026-87859 · GHSA-9f6g-j8ch-79g4
morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
Priority LOW 30
morgan is an HTTP request logger middleware for Node.js.
No morgan vulnerabilities are listed in CISA KEV.
1 record
morgan is an HTTP request logger middleware for Node.js.