Morgan Project: >> Morgan >> 1.0.0 Security Vulnerabilities
An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.
CVSS Score
9.8
EPSS Score
0.021
Published
2019-03-21