Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-hmw2-7cc7-3qxx
  • npm/form-data
 form-data: CRLF injection in form-data via unescaped multipart field names and filenames 15 Jun
  • Fix available
  • Severity - 8.7 (High)
GHSA-xp7r-j8r6-j9h3
  • npm/parse-nested-form-data
 parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names 18 May
  • Fix available
  • Severity - 8.2 (High)
GHSA-m2hg-wjq3-28wq
  • npm/form-data-objectizer
 form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys 18 May
  • Fix available
  • Severity - 8.2 (High)
MAL-2026-1636
  • npm/@sommos/create-leaverule-or-terminationrule-form-data
 Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm) 18 Mar
  • No fix available
MAL-2026-509
  • npm/@sommos/create-program-template-form-data
 Malicious code in @sommos/create-program-template-form-data (npm) 26 Jan
  • No fix available
GHSA-fjxv-7rqg-78g4
  • npm/form-data
 form-data uses unsafe random function in form-data for choosing boundary 21 Jul 2025
  • Fix available
  • Severity - 9.4 (Critical)