2 matches found
Improper Output Neutralization for Logs
Overview org.webjars.npm:morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs in its format-token expansion, which does not neutralize the Unicode line separators U+0085 NEL, U+2028 LINE SEPARATOR, and...
6.9CVSS6AI score0.00332EPSS
SaveExploits0References2
Improper Output Neutralization for Logs
Overview morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs in its format-token expansion, which does not neutralize the Unicode line separators U+0085 NEL, U+2028 LINE SEPARATOR, and U+2029 PARAGRAPH...
6.9CVSS6AI score0.00332EPSS
SaveExploits0References2
20