CVE-2026-45302
1 advisory.
npm/parse-nested-form-data CVE-2026-45302: high 8.2
parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names
Action: Upgrade parse-nested-form-data to 1.0.1 or later.
npm i parse-nested-form-data@1.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-xp7r-j8r6-j9h3
- https://github.com/milamer/parse-nested-form-data/security/advisories/GHSA-xp7r-j8r6-j9h3
- https://nvd.nist.gov/vuln/detail/CVE-2026-45302
- https://github.com/milamer/parse-nested-form-data/commit/527ad58eb486e32438f7198fb88315c20449d792
- https://github.com/milamer/parse-nested-form-data
- https://github.com/milamer/parse-nested-form-data/releases/tag/v1.0.1
CVE-2026-45302 · published · modified · JSON