Known vulnerabilities in form-data

Vendor: FormData
Software: form-data
Software CPE: cpe:2.3:a:formdata:form-data:*:*:*:*:*:*:*:*
Website: https://github.com/form-data
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting form-data form-data is affected by 2 known vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143		 CWE-93 High
No
No
 2.5.6, 3.0.5, 4.0.6 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 4 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 2.5.4, 3.0.4, 4.0.4 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more