Skip to content

Update dependency morgan to v1.12.0 - #48

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/morgan-1.x-lockfile
Open

Update dependency morgan to v1.12.0#48
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/morgan-1.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
morgan dependencies minor 1.10.11.12.0

By merging this PR, the issue #47 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
Medium Medium 5.3 CVE-2026-15603
Medium Medium 5.3 CVE-2026-5078

Release Notes

expressjs/morgan (morgan)

v1.12.0

Compare Source

======

  • Security fix for CVE-2026-15603(GHSA-jxfw-x594-9x9m)
  • Allow format functions to return objects for streams in objectMode
  • Respect the NO_COLOR environment variable in the dev format

v1.11.0

Compare Source

======

  • add :pid token

Security Fix:


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Jun 4, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/morgan-1.x-lockfile branch from 38f9241 to 4ff79c1 Compare August 31, 2026 01:01
@mend-for-github-com mend-for-github-com Bot changed the title Update dependency morgan to v1.11.0 Update dependency morgan to v1.12.0 Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants