Post
Ulises Gascón
ulisesgascon.com
did:plc:rgn3ralkvtzgv5a6f74ee7ba
🚨 Moderate-severity security fix in morgan@1.11.0 just released!
Patches CVE-2026-5078 — morgan vulnerable to Log Forging via unneutralized control characters in :remote-user
https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m
2026-06-02T19:47:16.261Z