Critical DLA-4261-1 1 CVE

node-form-data - security update

Published Jul 31, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	node-form-data	3.0.0-2+deb11u1

Vulnerabilities 1

Critical 9.4

CVE-2025-7783 Public exploit

Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-skopt-enas katib-suggestion-hyperband Debian Ubuntu Azure Linux Wolfi npm

Jul 18, 2025