Skip to content

Small upgrade for form-data #8

@anshumanbh

Description

@anshumanbh

Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=13475903&groupId=6189&sidebarIssueTask=934638&sidebarTab=tasks

Scope

This task includes issues in the following code repository:

  • anshuman-blog-nextjs: package-lock.json

TLDR

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

How to fix

We recommend updating from 4.0.0 to 4.0.4.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions