Debian/node-morgan: medium 5.3
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField() function does not escape the double quote character, which delimits the quoted fields of the Ap
Action: Upgrade node-morgan to 1.12.1+~1.9.10-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.1+~1.9.10-1 | - |
Fixed versions
| 1.12.1+~1.9.10-1 |
Sources
- osv: DEBIAN-CVE-2026-87859#Debian:14/node-morgan
- https://security-tracker.debian.org/tracker/CVE-2026-87859
published · modified · JSON