expressjs/morgan Security Advisories | GitStock

medium2026-09-28

morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

GHSA-9f6g-j8ch-79g4 · CVE-2026-87859

medium2026-09-08

morgan vulnerable to Log Forging via unescaped Unicode line separators

GHSA-jxfw-x594-9x9m · CVE-2026-15603

medium2026-07-10

morgan vulnerable to Log Forging via unneutralized control characters in :remote-user

GHSA-4vj7-5mj6-jm8m · CVE-2026-5078