Debian/node-morgan: medium 5.3
morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the Unicode line separator characters U+0085
Action: Upgrade node-morgan to 1.12.0+~1.9.10-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.0+~1.9.10-1 | - |
Fixed versions
| 1.12.0+~1.9.10-1 |
Sources
- osv: DEBIAN-CVE-2026-15603#Debian:14/node-morgan
- https://security-tracker.debian.org/tracker/CVE-2026-15603
published · modified · JSON