Ref# ADV2025_224 | Date: Jul 28th 2025

---

JavaScript has published a security advisory highlighting vulnerabilities in the following products on July 22nd, 2025. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• Form-data library – versions prior to 2.5.4 

• Form-data library – versions 3.0.0 to 3.0.3 

• Form-data library – versions 4.0.0 to 4.0.3 

For more information on these updates, you can follow this URL: 

JavaScript form-data library Security Advisory 

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary. 

PDF Download: JavaScript Form-Data Security Advisory

References 

• JavaScript form-data library Security Advisory. (July 22nd, 2025). Retrieved from GitHub. https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4  

• JavaScript Form-Data Security Advisory. (July 23rd, 2025). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/javascript-form-data-security-advisory-av25-448