Vulnerability index

Browse CVEs

2 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 5.3 CVE-2026-5078 Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to th… Morgan 1.11.0+ Fix from $1,6002026-06-03 CRITICAL 9.8 CVE-2019-5413 An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1. Morgan 1.9.1+ Fix from $2,3002019-03-21