EPSS
Percentile
78.1%
morgan is vulnerable to prototype pollution. A lack of object validation allows an attacker to inject arbitrary commands.
github.com/expressjs/morgan/commit/e329663836809de4be557b200a5b983ab8b4e6c2
hackerone.com/reports/390881