Skip to content

critical vulnerability form-data #676

@rayeeroded

Description

@rayeeroded

form-data is a dependency of danfojs
audit shows

│ critical │ form-data uses unsafe random function in form-data for │
│ │ choosing boundary │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ form-data │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=2.5.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ danfojs-node │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ danfojs-node > request > form-data │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1106509

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions