Code Injection in morgan
Verisons of `morgan` before 1.9.1 are vulnerable to code injection when user input is allowed into the filter or combined with a prototype pollution attack.RecommendationUpdate to version 1.9.1 or later.