CVE-2026-15603 vulnerabilities

Vulnerabilities for packages: azurite, wazuh-dashboard, wazuh-dashboard-fips...

Linux Distros Unpatched Vulnerability : CVE-2026-15603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the...

20231122-npm (1.0.0), 2048.io (0.0.1) +6536 more potentially affected by CVE-2026-15603 +1 more via morgan (>=1.0.0, <=1.11.0)

morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-15603, CVE-2026-5078 Source advisory: SNYK:JS-MORGAN-19432128...

CVE-2026-15603

creationtimestamp| type| source ---|---|--- 2026-08-28 13:48:46+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mu5iuzbwi22e 2026-09-09 08:32:03+00:00| seen| https://gist.github.com/alon710/b919d27f81b437b0cf80f08fd81f817b...

CVE-2026-15603 morgan vulnerable to Log Forging via unescaped Unicode line separators

morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the Unicode line separator characters U+0085 Next Line, U+2028 Line Separator, and U+2029 Paragraph Separator. An unauthenticated remote clien...