Skip to content

[Aikido] Fix critical security issue in form-data via minor version upgrade from 4.0.2 to 4.0.4#47

Open
aikido-autofix[bot] wants to merge 1 commit intomainfrom
fix/aikido-security-update-packages-5810762-vVyf
Open

[Aikido] Fix critical security issue in form-data via minor version upgrade from 4.0.2 to 4.0.4#47
aikido-autofix[bot] wants to merge 1 commit intomainfrom
fix/aikido-security-update-packages-5810762-vVyf

Conversation

@aikido-autofix
Copy link
Copy Markdown
Contributor

This PR will resolve the following CVEs:

CVE ID Severity Description
CVE-2025-7783
🚨 CRITICAL
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

@aikido-autofix aikido-autofix bot requested a review from a team as a code owner July 23, 2025 07:18
@aikido-autofix aikido-autofix bot requested a review from tvhees July 23, 2025 07:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants