CVE-2019-5413 — Vulnerability intelligence

morgan project — morgan

Published: 2019-03-17T19:36:35.000Z

CVSS

9.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.

Sources

• CVE-2019-5413
• Exploit, Third Party Advisory
• Original advisory
• Original advisory
• CVE-2019-5413