Nixpkgs security tracker
Activity log
- Created suggestion
Usage of unsafe random function in form-data for choosing boundary
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.
References
Affected products
form-data
- ==3.0.0 - 3.0.3
- ==< 2.5.4
- ==4.0.0 - 4.0.3
Matching in nixpkgs
pkgs.python311Packages.streaming-form-data
Streaming parser for multipart/form-data
pkgs.python312Packages.streaming-form-data
Streaming parser for multipart/form-data
pkgs.python313Packages.streaming-form-data
Streaming parser for multipart/form-data
pkgs.chickenPackages_5.chickenEggs.multipart-form-data
Reads & decodes HTTP multipart/form-data requests.
Package maintainers
-
@zhaofengli Zhaofeng Li <hello@zhaofeng.li>