Skip to content

[Aikido] Fix critical security issue in form-data via version upgrade to 4.0.4#53

Merged
kai-nguyen-aligent merged 1 commit intomainfrom
fix/aikido-security-update-packages-5810752-gzb2
Jul 23, 2025
Merged

[Aikido] Fix critical security issue in form-data via version upgrade to 4.0.4#53
kai-nguyen-aligent merged 1 commit intomainfrom
fix/aikido-security-update-packages-5810752-gzb2

Conversation

@aikido-autofix
Copy link
Copy Markdown
Contributor

This PR will resolve the following CVEs:

CVE ID Severity Description
CVE-2025-7783
🚨 CRITICAL
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

@kai-nguyen-aligent kai-nguyen-aligent merged commit 4281dba into main Jul 23, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant