CVE-2025-7783 - form-data
Versions of the form-data library (up to 2.5.3, 3.0.0‑3.0.3, and 4.0.0‑4.0.3) may generate predictable values, letting an attacker add extra parameters to web requests. This…

Too many irrelevant or confusing CVEs? Use stackflag.com

#formdata #ljharb #npm #CVE #infosec

CVE-2026-9277 - shell-quote
A security issue affects Debian Linux systems, allowing an attacker to run unauthorized code on a vulnerable system without needing a password. This could potentially…

Too many irrelevant or confusing CVEs? Use stackflag.com

#shellquote #ljharb #Debian12 #CVE #infosec

CVE-2021-42740 - shell-quote
The shell-quote package for Node.js versions prior to 1.7.3 has a security flaw that allows an attacker to inject malicious commands on Windows systems. This could happen…

Too many irrelevant or confusing CVEs? Use stackflag.com

#shellquote #ljharb #npm #CVE #infosec