Root has patched CVE-2019-5413 in the morgan package for Root:npm. Multiple fixed versions available.
{ "severity": "CRITICAL", "distro": "npm", "source": "Root", "distro_version": "" }
"aikido.1"
"1.6.1"
[ "1.6.1-aikido.1" ]
true
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2019-5413.json"
1.0
[ "1.6.1-root.io.1" ]
"root.io.1"