Form-data vulnerabilities
We track 1 vulnerability in Form-data products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 12, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Form-data vulnerabilities
- 7.5 High severity
form-data: Improper Neutralization of CRLF Sequences
form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage r