CRITICALnpm
GHSA-fjxv-7rqg-78g4· CVE-2025-7783form-data uses unsafe random function in form-data for choosing boundary
Modified: 9/10/2026
package
npm/form-data
pkg:npm/form-data
HIGH7.5npm
GHSA-hmw2-7cc7-3qxx· CVE-2026-12143form-data: CRLF injection in form-data via unescaped multipart field names and filenames
Modified: 9/10/2026