form-data

Products

ProductCVEsExploitedLatest
form-data1–Jun 12, 2026

Exploited and recent CVEs

  • CVE-2026-12143 High 7.5 form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) 0.7%