Insecure Randomness

🗓️ 07 May 2025 17:59:28Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

Formidable has a vulnerability due to insecure randomness in generating temporary filenames.

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in formidable	29 Oct 202510:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for October 2025 - Multiple CVEs addressed	3 Dec 202506:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	30 Sep 202516:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java and Node.js	23 Jun 202511:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple vulnerabilities found in Java and Node.js	26 Jun 202515:32	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Formidable (aka node-formidable) may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-46653)	26 Sep 202508:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	10 Mar 202607:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	17 Dec 202511:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Formidable affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	22 Jan 202605:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions.	29 Sep 202515:23	–	ibm

Vulners

Node

formidable_project formidableRange3.1.1-canary.20211030–3.5.2js

formidable_project formidableRange2.1.0–2.1.2js

formidable_project formidableMatch2.1.2js

Source	Link
github	www.github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md
github	www.github.com/node-formidable/formidable/commit/022c2c5577dfe14d2947f10909d81b03b6070bf5
github	www.github.com/node-formidable/formidable/commit/37a3e89fca1ed68ec674a539f13aafd62221ddaa
github	www.github.com/advisories/GHSA-75v8-2h7p-7m2m
github	www.github.com/node-formidable/formidable/blob/d0fbec13edc8add54a1afb9ce1a8d3db803f8d47/CHANGELOG.md

22 May 2025 13:31Current

3.7Low risk

Vulners AI Score3.7

CVSS 3.13.1

EPSS0.00052

SSVC