CVE-2026-12143

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the "field" argument to "FormDataappend" and the "filename" option are concatenated verbatim into the "Content-Disposition" header without escaping carriage return CR, line feed LF, or double-quot...

CVE-2026-12143: Improper Neutralization of CRLF Sequences

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field argument to FormDataappend and the filename option are concatenated verbatim into the Content-Disposition header without escaping carriage return CR, line feed LF, or double-quote "...