[ Vendor · 1 CVEs ]
morgan
CVEs affecting morgan published in the last 30 days, plus any morgan CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-87859 | 11 Sep 2026 | CVSS 5.3 | morgan vulnerable to Log Injection via unescaped double quote in quoted log fieldsmorgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField() function does not escape the double quote… | Fix |