form-data: form-data: CRLF injection in form-data via unescaped multipart field names and filenames
form-data: CRLF injection in form-data via unescaped multipart field names and filenames (high). GHSA-hmw2-7cc7-3qxx, CVE-2026-12143.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
form-data: CRLF injection in form-data via unescaped multipart field names and filenames
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?