node-morgan vulnerabilities (Debian)

3 vulnerabilities.

• node-morgan Debian morgan vulnerable to Log Injection via unescaped double quote in quoted log fields CVE-2026-87859 Fix available 5.3 MediumSeptember 11, 2026
• node-morgan Debian morgan vulnerable to Log Forging via unescaped Unicode line separators CVE-2026-15603 Fix available 5.3 MediumAugust 28, 2026
• node-morgan Debian morgan vulnerable to Log Forging via unneutralized control characters in :remote-user CVE-2026-5078 Fix available 5.3 MediumJune 3, 2026