CVE-2026-46510
1 advisory.
npm/form-data-objectizer CVE-2026-46510: high 8.2, EPSS 0.46%
form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys
Action: Upgrade form-data-objectizer to 1.0.1 or later.
npm i form-data-objectizer@1.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-m2hg-wjq3-28wq
- https://github.com/kaspernj/form-data-objectizer/security/advisories/GHSA-m2hg-wjq3-28wq
- https://nvd.nist.gov/vuln/detail/CVE-2026-46510
- https://github.com/kaspernj/form-data-objectizer/commit/7c54b99408e6e9cd6533b7245bf197dadc2a2dbc
- https://github.com/kaspernj/form-data-objectizer
CVE-2026-46510 · published · modified · JSON