Commit 19b7c15
authored
Fix security issue in form-data via minor version upgrade from 2.5.2 to 2.5.4 (#194)
This PR will resolve the following CVEs:
| CVE ID | Severity | Description |
| --- | --- | --- |
|
<pre>[CVE-2025-7783](https://app.aikido.dev/issues/13367485/detail?groupId=324#CVE-2025-7783)</pre>
| <pre>MEDIUM</pre> | Use of Insufficiently Random Values vulnerability
in form-data allows HTTP Parameter Pollution (HPP). This vulnerability
is associated with program files lib/form_data.Js.<br><br>This issue
affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3. |
Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>1 parent 1d7add4 commit 19b7c15
2 files changed
Lines changed: 163 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
92 | 92 | | |
93 | 93 | | |
94 | 94 | | |
95 | | - | |
| 95 | + | |
| 96 | + | |
96 | 97 | | |
97 | 98 | | |
0 commit comments