Skip to content
OpenAdvisories

Package · Ubuntu

node-formidable

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.1
    CVE-2025-46653

    Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content

    Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." (Also, there is a scenario in which only the l…

    node-formidable Formidable node-formidable node-formidable Debian Ubuntu npm