Skip to content

Add Socket patch for CVE-2025-7783 in pkg:npm/form-data@2.3.3 - #2

Open
socket-security[bot] wants to merge 1 commit into
developfrom
socket/autopatch-1786666722491-c7d6e636
Open

Add Socket patch for CVE-2025-7783 in pkg:npm/form-data@2.3.3#2
socket-security[bot] wants to merge 1 commit into
developfrom
socket/autopatch-1786666722491-c7d6e636

Conversation

@socket-security

Copy link
Copy Markdown

Summary

This PR updates Socket security patches for your dependencies.

These patches are applied via the Socket patch agent — .socket/manifest.json + a package.json postinstall hook.

Changes

  • Added: CVE-2025-7783 in pkg:npm/form-data@2.3.3 (Socket Patch)
    • Severity: CRITICAL
    • Summary: form-data uses unsafe random function in form-data for choosing boundary

Testing

Review the patches and test your application to ensure compatibility.


🔒 Powered by Socket Security

Updates:
- 1 blob(s) added
- 0 blob(s) removed
- Manifest updated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants