UbuntuUpdates.org

Package "node-form-data"

Name: node-form-data

Description:

Create multipart/form-data streams module for Node.js

Latest version: 4.0.0-1ubuntu0.1
Release: noble (24.04)
Level: security
Repository: universe
Homepage: https://github.com/felixge/node-form-data

Links


Download "node-form-data"


Other versions of "node-form-data" in Noble

Repository Area Version
base universe 4.0.0-1
updates universe 4.0.0-1ubuntu0.1

Changelog

Version: 4.0.0-1ubuntu0.1 2026-01-27 08:09:14 UTC

  node-form-data (4.0.0-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: HTTP Parameter Pollution
    - debian/patches/CVE-2025-7783.patch: switch to using `crypto` random
      for boundary values
    - CVE-2025-7783

 -- Shishir Subedi <email address hidden> Fri, 23 Jan 2026 13:13:59 +0545

CVE-2025-7783 Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program f



About   -   Send Feedback to @ubuntu_updates