Read the docs

node-formidable

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

node-formidable records in CISA KEV

No node-formidable vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 48

Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." (Also,…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00446 Published 2025-04-26 Partial fix · 3.5.3, 2.1.3 CWE-338
Open these records in search →