form-data-objectizer vulnerabilities

1 known vulnerability in form-data-objectizer from Kaspernj. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  form-data-objectizer: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-46510May 29, 2026Kaspernj

  form-data-objectizer converts FormData to object. Prior to 1.0.1, form-data-objectizer walks bracket-notation form keys (e.g. name[sub]) into nested objects without filtering __proto__, constructor, or prototype. A single HTTP form field whose name starts with