package

npm / form-data

pkg:npm/form-data

CRITICAL npm

form-data uses unsafe random function in form-data for choosing boundary

Modified: 2/4/2026

HIGH 7.5 npm

form-data: CRLF injection in form-data via unescaped multipart field names and filenames

Modified: 6/15/2026