Ulises Gasconulisesgascon@fosstodon.org
Sep 11, 2026, 9:21 AM🚨 Medium-severity security fix in morgan@1.12.1 just released!
Patches CVE-2026-87859: morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
https://github.com/expressjs/morgan/security/advisories/GHSA-9f6g-j8ch-79g4