1.10.0
11 years ago
5 years ago
Known vulnerabilities in the morgan package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Arbitrary Code Injection. An attacker could use the format parameter to inject arbitrary commands. How to fix Arbitrary Code Injection? Upgrade | <1.9.1 |