Skip to content
OpenAdvisories

Package · Debian

node-formidable

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.1
    CVE-2025-46653

    Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content

    Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." (Also, there is a scenario in which only the l…

    node-formidable Formidable node-formidable node-formidable Debian Ubuntu npm
  • Unscored —
    CVE-2022-29622 Public exploit

    An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted fi…

    node-formidable Debian