{"action":"Upgrade form-data to 2.5.4 or later.","affected":[{"fixed":"2.5.4","introduced":"0"},{"fixed":"3.0.4","introduced":"3.0.0"},{"fixed":"4.0.4","introduced":"4.0.0"}],"component":"form-data","cve_ids":["CVE-2025-7783"],"ecosystem":"npm","epss":0.0181,"exploited":false,"fixed_versions":["2.5.4","3.0.4","4.0.4"],"ghsa_id":"GHSA-fjxv-7rqg-78g4","id":"tcs_01M5KFNQMDRD4V6RB7T414EXHZ","modified_at":"2026-09-10T03:50:57.924154051Z","published_at":"2025-07-21T19:04:54Z","references":["https://osv.dev/vulnerability/GHSA-fjxv-7rqg-78g4","https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4","https://nvd.nist.gov/vuln/detail/CVE-2025-7783","https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0","https://github.com/benweissmann/CVE-2025-7783-poc","https://github.com/form-data/form-data","https://lists.debian.org/debian-lts-announce/2025/07/msg00023.html"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-fjxv-7rqg-78g4","url":"https://osv.dev/vulnerability/GHSA-fjxv-7rqg-78g4"}],"summary":"form-data uses unsafe random function in form-data for choosing boundary"}