Critical severityOSV Advisory· Published Jul 18, 2025· Updated Apr 15, 2026
CVE-2025-7783
CVE-2025-7783
Description
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.
This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
form-datanpm | < 2.5.4 | 2.5.4 |
form-datanpm | >= 3.0.0, < 3.0.4 | 3.0.4 |
form-datanpm | >= 4.0.0, < 4.0.4 | 4.0.4 |
Affected products
178- osv-coords177 versionspkg:apk/chainguard/airflow-2pkg:apk/chainguard/airflow-2-compatpkg:apk/chainguard/airflow-2-iamguarded-compatpkg:apk/chainguard/gitlab-rails-ce-19.0pkg:apk/chainguard/gitlab-rails-ce-fips-19.1pkg:apk/chainguard/jitsucom-jitsupkg:apk/chainguard/jitsucom-jitsu-consolepkg:apk/chainguard/jitsucom-jitsu-rotorpkg:apk/chainguard/kibana-7pkg:apk/chainguard/kibana-7-bitnamipkg:apk/chainguard/kibana-8pkg:apk/chainguard/kibana-8-bitnamipkg:apk/chainguard/kibana-8-iamguardedpkg:apk/chainguard/kibana-9pkg:apk/chainguard/kibana-9-bitnamipkg:apk/chainguard/kibana-9-iamguardedpkg:apk/chainguard/kubeflow-centraldashboardpkg:apk/chainguard/kubeflow-pipelinespkg:apk/chainguard/kubeflow-pipelines-apiserverpkg:apk/chainguard/kubeflow-pipelines-cache-deployerpkg:apk/chainguard/kubeflow-pipelines-cache-deployer-compatpkg:apk/chainguard/kubeflow-pipelines-cache_serverpkg:apk/chainguard/kubeflow-pipelines-frontendpkg:apk/chainguard/kubeflow-pipelines-metadata-envoy-configpkg:apk/chainguard/kubeflow-pipelines-metadata-writerpkg:apk/chainguard/kubeflow-pipelines-metadata-writer-compatpkg:apk/chainguard/kubeflow-pipelines-persistence_agentpkg:apk/chainguard/kubeflow-pipelines-scheduledworkflowpkg:apk/chainguard/kubeflow-pipelines-viewer-crd-controllerpkg:apk/chainguard/langfusepkg:apk/chainguard/langfuse-compatpkg:apk/chainguard/langfuse-workerpkg:apk/chainguard/opensearch-dashboards-2pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-compatpkg:apk/chainguard/opensearch-dashboards-2-configpkg:apk/chainguard/opensearch-dashboards-2-dashboards-mapspkg:apk/chainguard/opensearch-dashboards-2-dashboards-notificationspkg:apk/chainguard/opensearch-dashboards-2-dashboards-observabilitypkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbenchpkg:apk/chainguard/opensearch-dashboards-2-dashboards-reportingpkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevancepkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizationspkg:apk/chainguard/opensearch-dashboards-2-fipspkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-fips-configpkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-mapspkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notificationspkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observabilitypkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbenchpkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reportingpkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevancepkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizationspkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboardspkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboardspkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3pkg:apk/chainguard/opensearch-dashboards-3-alerting-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-anomaly-detection-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-configpkg:apk/chainguard/opensearch-dashboards-3-dashboards-mapspkg:apk/chainguard/opensearch-dashboards-3-dashboards-notificationspkg:apk/chainguard/opensearch-dashboards-3-dashboards-observabilitypkg:apk/chainguard/opensearch-dashboards-3-dashboards-query-workbenchpkg:apk/chainguard/opensearch-dashboards-3-dashboards-reportingpkg:apk/chainguard/opensearch-dashboards-3-dashboards-search-relevancepkg:apk/chainguard/opensearch-dashboards-3-fipspkg:apk/chainguard/opensearch-dashboards-3-fips-alerting-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-anomaly-detection-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-configpkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-mapspkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-notificationspkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-observabilitypkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-query-workbenchpkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-reportingpkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-search-relevancepkg:apk/chainguard/opensearch-dashboards-3-fips-index-management-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-ml-commons-dashboardspkg:apk/chainguard/opensearch-dashboards-3-fips-security-analytics-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-index-management-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-ml-commons-dashboardspkg:apk/chainguard/opensearch-dashboards-3-security-analytics-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-pluginpkg:apk/chainguard/prismpkg:apk/chainguard/sqlpadpkg:apk/chainguard/sqlpad-compatpkg:apk/chainguard/tileserver-glpkg:apk/chainguard/tileserver-gl-compatpkg:apk/chainguard/tileserver-gl-fipspkg:apk/chainguard/tileserver-gl-fips-compatpkg:apk/chainguard/vitess-19pkg:apk/chainguard/vitess-19-binariespkg:apk/chainguard/vitess-20pkg:apk/chainguard/vitess-20-binariespkg:apk/chainguard/vitess-20-compatpkg:apk/chainguard/vitess-21pkg:apk/chainguard/vitess-21-binariespkg:apk/chainguard/vitess-21-compatpkg:apk/chainguard/vitess-22pkg:apk/chainguard/vitess-22-binariespkg:apk/chainguard/vitess-22-compatpkg:apk/wolfi/jitsucom-jitsupkg:apk/wolfi/jitsucom-jitsu-consolepkg:apk/wolfi/jitsucom-jitsu-rotorpkg:apk/wolfi/kubeflow-centraldashboardpkg:apk/wolfi/kubeflow-pipelinespkg:apk/wolfi/kubeflow-pipelines-apiserverpkg:apk/wolfi/kubeflow-pipelines-cache-deployerpkg:apk/wolfi/kubeflow-pipelines-cache-deployer-compatpkg:apk/wolfi/kubeflow-pipelines-cache_serverpkg:apk/wolfi/kubeflow-pipelines-frontendpkg:apk/wolfi/kubeflow-pipelines-metadata-envoy-configpkg:apk/wolfi/kubeflow-pipelines-metadata-writerpkg:apk/wolfi/kubeflow-pipelines-metadata-writer-compatpkg:apk/wolfi/kubeflow-pipelines-persistence_agentpkg:apk/wolfi/kubeflow-pipelines-scheduledworkflowpkg:apk/wolfi/kubeflow-pipelines-viewer-crd-controllerpkg:apk/wolfi/langfusepkg:apk/wolfi/langfuse-compatpkg:apk/wolfi/langfuse-workerpkg:apk/wolfi/opensearch-dashboards-2pkg:apk/wolfi/opensearch-dashboards-2-alerting-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-2-anomaly-detection-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-2-compatpkg:apk/wolfi/opensearch-dashboards-2-configpkg:apk/wolfi/opensearch-dashboards-2-dashboards-mapspkg:apk/wolfi/opensearch-dashboards-2-dashboards-notificationspkg:apk/wolfi/opensearch-dashboards-2-dashboards-observabilitypkg:apk/wolfi/opensearch-dashboards-2-dashboards-query-workbenchpkg:apk/wolfi/opensearch-dashboards-2-dashboards-reportingpkg:apk/wolfi/opensearch-dashboards-2-dashboards-search-relevancepkg:apk/wolfi/opensearch-dashboards-2-dashboards-visualizationspkg:apk/wolfi/opensearch-dashboards-2-index-management-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-2-ml-commons-dashboardspkg:apk/wolfi/opensearch-dashboards-2-security-analytics-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-2-security-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3pkg:apk/wolfi/opensearch-dashboards-3-alerting-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-anomaly-detection-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-configpkg:apk/wolfi/opensearch-dashboards-3-dashboards-mapspkg:apk/wolfi/opensearch-dashboards-3-dashboards-notificationspkg:apk/wolfi/opensearch-dashboards-3-dashboards-observabilitypkg:apk/wolfi/opensearch-dashboards-3-dashboards-query-workbenchpkg:apk/wolfi/opensearch-dashboards-3-dashboards-reportingpkg:apk/wolfi/opensearch-dashboards-3-dashboards-search-relevancepkg:apk/wolfi/opensearch-dashboards-3-index-management-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-ml-commons-dashboardspkg:apk/wolfi/opensearch-dashboards-3-security-analytics-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-pluginpkg:apk/wolfi/prismpkg:apk/wolfi/sqlpadpkg:apk/wolfi/sqlpad-compatpkg:apk/wolfi/tileserver-glpkg:apk/wolfi/tileserver-gl-compatpkg:apk/wolfi/vitess-20pkg:apk/wolfi/vitess-20-binariespkg:apk/wolfi/vitess-20-compatpkg:apk/wolfi/vitess-21pkg:apk/wolfi/vitess-21-binariespkg:apk/wolfi/vitess-21-compatpkg:apk/wolfi/vitess-22pkg:apk/wolfi/vitess-22-binariespkg:apk/wolfi/vitess-22-compatpkg:npm/form-datapkg:rpm/opensuse/python-jupyterlab-templates&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/python-nbdime&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/velociraptor&distro=openSUSE%20Tumbleweedpkg:rpm/suse/nodejs18&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
< 2.11.0-r15+ 176 more
- (no CPE)range: < 2.11.0-r15
- (no CPE)range: < 2.11.0-r15
- (no CPE)range: < 2.11.0-r15
- (no CPE)range: < 19.0.3-r1
- (no CPE)range: < 19.1.1-r1
- (no CPE)range: < 2.10.0-r4
- (no CPE)range: < 2.10.0-r4
- (no CPE)range: < 2.10.0-r4
- (no CPE)range: < 7.17.29-r2
- (no CPE)range: < 7.17.29-r2
- (no CPE)range: < 8.18.4-r0
- (no CPE)range: < 8.18.4-r0
- (no CPE)range: < 8.18.4-r0
- (no CPE)range: < 9.0.4-r0
- (no CPE)range: < 9.0.4-r0
- (no CPE)range: < 9.0.4-r0
- (no CPE)range: < 1.10.0-r10
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.15.0-r1
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 3.85.1-r1
- (no CPE)range: < 3.85.1-r1
- (no CPE)range: < 3.85.1-r1
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r3
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 5.14.2-r4
- (no CPE)range: < 7.5.4-r4
- (no CPE)range: < 7.5.4-r4
- (no CPE)range: < 5.3.1-r9
- (no CPE)range: < 5.3.1-r9
- (no CPE)range: < 5.3.1-r7
- (no CPE)range: < 5.3.1-r7
- (no CPE)range: < 19.0.10-r13
- (no CPE)range: < 19.0.10-r13
- (no CPE)range: < 20.0.8-r3
- (no CPE)range: < 20.0.8-r3
- (no CPE)range: < 20.0.8-r3
- (no CPE)range: < 21.0.5-r4
- (no CPE)range: < 21.0.5-r4
- (no CPE)range: < 21.0.5-r4
- (no CPE)range: < 22.0.1-r3
- (no CPE)range: < 22.0.1-r3
- (no CPE)range: < 22.0.1-r3
- (no CPE)range: < 2.10.0-r4
- (no CPE)range: < 2.10.0-r4
- (no CPE)range: < 2.10.0-r4
- (no CPE)range: < 1.10.0-r10
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.15.0-r1
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 2.14.3-r3
- (no CPE)range: < 3.85.1-r1
- (no CPE)range: < 3.85.1-r1
- (no CPE)range: < 3.85.1-r1
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 3.1.0-r2
- (no CPE)range: < 5.14.2-r4
- (no CPE)range: < 7.5.4-r4
- (no CPE)range: < 7.5.4-r4
- (no CPE)range: < 5.3.1-r9
- (no CPE)range: < 5.3.1-r9
- (no CPE)range: < 20.0.8-r3
- (no CPE)range: < 20.0.8-r3
- (no CPE)range: < 20.0.8-r3
- (no CPE)range: < 21.0.5-r4
- (no CPE)range: < 21.0.5-r4
- (no CPE)range: < 21.0.5-r4
- (no CPE)range: < 22.0.1-r3
- (no CPE)range: < 22.0.1-r3
- (no CPE)range: < 22.0.1-r3
- (no CPE)range: < 2.5.4
- (no CPE)range: < 0.5.2-3.1
- (no CPE)range: < 4.0.2-21.1
- (no CPE)range: < 0.7.0.4.git185.a5708584-2.1
- (no CPE)range: < 18.20.8-8.41.1
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-fjxv-7rqg-78g4ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-7783ghsaADVISORY
- github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0nvdWEB
- github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4nvdWEB
- lists.debian.org/debian-lts-announce/2025/07/msg00023.htmlnvdWEB
News mentions
0No linked articles in our index yet.