CVE-2019-5413

CVE-2019-5413

Vendor N/A

Product morgan

Weakness CWE-94 · Code injection

Published March 17, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.

Key dates

02Disclosure timeline

March 17, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-5413 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2023-6051 Improper Control of Generation of Code ('Code Injection') in GitLab CVE-2026-30887 OneUptime Affected by Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE CVE-2020-12013 CVE-2022-4223 CVE-2025-6000 Arbitrary Remote Code Execution via Plugin Catalog Abuse