Skip to content
OpenAdvisories

Package · npm

parse-nested-form-data

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2026-45302

    Prototype Pollution in parse-nested-form-data via `__proto__` in FormData field names

    parse-nested-form-data is a tiny node module for parsing FormData by name into objects and arrays. Prior to version 1.0.1, parseFormData() walks bracket and dot-notation FormData field names into nested objects without filtering reserved property keys. A sing…

    milamer parse-nested-form-data parse-nested-form-data npm