bugfix: CVE-2019-5413 
bugfix: CVE-2019-5413 

CVE-2019-5413 More information
moderate severity
Vulnerable versions: < 1.9.1
Patched version: 1.9.1
An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.
ALT-F1/bootstrap3-jade-node-express-grunt,ALT-F1/bootstrap3-pug-former_jade-node-express-grunt,ALT-F1/bootstrap3-jade-node-express-grunt,ALT-F1/bootstrap3-pug-former_jade-node-express-grunt,ALT-F1/bootstrap3-jade-node-express-grunt,ALT-F1/bootstrap3-pug-former_jade-node-express-grunt,ALT-F1/bootstrap3-pug-former_jade-node-express-grunt,ALT-F1/bootstrap3-jade-node-express-grunt,ALT-F1/bootstrap3-pug-former_jade-node-express-grunt,ALT-F1/bootstrap3-jade-node-express-grunt