4 matches found
ROOT-APP-NPM-CVE-2019-5413 CVE-2019-5413 in morgan - Patched by Root
Root has patched CVE-2019-5413 in the morgan package for Root:npm. Multiple fixed versions available...
MAL-2026-6859 Malicious code in older_morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44340068d23f1fff8b2fb707922053997b84f75575607966ba888f15feafbd8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-121324
Malicious code in testcafe-sass-loader-morgan-package npm...
CVE-2019-5413
The Node.js morgan package, before version 1.9.1, does not properly sanitize input in the compile function, allowing for potential execution of code. This vulnerability can only be exploited by attackers with the ability to provide input to the compile function or in combination with another...