Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: node-formidable Component: Formidable Clear all filters
TI-2025-29348 CVE-2025-46653 · GHSA-75v8-2h7p-7m2m

Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to…

Priority MEDIUM 48

Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." (Also,…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00446 Published 2025-04-26 Partial fix · 3.5.3, 2.1.3 CWE-338