jonchurch

morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

lodash vulnerable to Code Injection via `_.template` imports key names

morgan vulnerable to Log Forging via unescaped Unicode line separators

lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`