Debian/node-formidable: low 3.1
Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographica
Action: Upgrade node-formidable to 3.5.4+~cs11.10.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.4+~cs11.10.5-1 | - |
Fixed versions
| 3.5.4+~cs11.10.5-1 |
Sources
- osv: DEBIAN-CVE-2025-46653#Debian:14/node-formidable
- https://security-tracker.debian.org/tracker/CVE-2025-46653
published · modified · JSON