2 CVEs
npm
form-data Vulnerabilities
CVE security advisories and vulnerability history for form-data by form-data.
2
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
2
Public exploits
PoC or exploit code
9.1
Avg CVSS
2025–2026
Last updated
CVE security advisories and vulnerability history for form-data by form-data.
Last updated
form-data has 2 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 9.1.
This page aggregates every publicly disclosed vulnerability (CVE) affecting form-data, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of form-data's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of form-data's CVEs are currently listed in CISA's KEV catalog.
Public exploits
2
2 of form-data's CVEs have a known public exploit available.
Browse every form-data version named in a CVE, then pick one to see only the CVEs that affect it.
2 CVEs
The CWE weakness categories most often found in form-data CVEs. Follow any weakness for its full explanation.
How many form-data CVEs were published each year.
Browse vulnerabilities for other products by form-data.
Common questions about form-data vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new form-data vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.