Known vulnerabilities in morgan

Vendor: Express.js
Software: morgan
Software CPE: cpe:2.3:a:expressjs:morgan:*:*:*:*:*:*:*:*
Website: https://expressjs.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting morgan morgan is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150697 - Improper Output Neutralization for Logs
CVE-2026-87859		 CWE-117 Medium
No
No
 1.12.1 17.09.2026 SB20260917236
#VU146052 - Improper Output Neutralization for Logs
CVE-2026-15603		 CWE-117 Medium
No
No
 1.12.0 28.08.2026 SB2026082834
SB2026100122
SB2026100820
#VU146051 - Improper Output Neutralization for Logs
CVE-2026-5078		 CWE-117 Medium
No
No
 1.11.0 28.08.2026 SB2026082833
SB2026100122
SB2026100820