From 9468e8b552d485542b5965895bc0e7c94c1cd892 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sat, 8 Aug 2026 21:40:09 +0000
Subject: [PATCH] fix: upgrade form-data to 2.5.4, 3.0.4, 4.0.4 (CVE-2025-7783)

form-data: Unsafe random function in form-data
Resolves CVE-2025-7783
---
 package-lock.json | 13 -------------
 package.json      |  3 +++
 2 files changed, 3 insertions(+), 13 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index cba33ab8e9..efeb4df271 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -30314,7 +30314,6 @@
         "combined-stream": "~1.0.6",
         "extend": "~3.0.2",
         "forever-agent": "~0.6.1",
-        "form-data": "~2.3.2",
         "har-validator": "~5.1.3",
         "http-signature": "~1.2.0",
         "is-typedarray": "~1.0.0",
@@ -30363,18 +30362,6 @@
         "request": "^2.34"
       }
     },
-    "node_modules/request/node_modules/form-data": {
-      "version": "2.3.3",
-      "license": "MIT",
-      "dependencies": {
-        "asynckit": "^0.4.0",
-        "combined-stream": "^1.0.6",
-        "mime-types": "^2.1.12"
-      },
-      "engines": {
-        "node": ">= 0.12"
-      }
-    },
     "node_modules/request/node_modules/uuid": {
       "version": "3.4.0",
       "license": "MIT",
diff --git a/package.json b/package.json
index a8fd5d65ba..da6e10342f 100644
--- a/package.json
+++ b/package.json
@@ -51,5 +51,8 @@
     "npm": "10.9.9",
     "semantic-release": "25.0.9",
     "ts-node": "10.9.2"
+  },
+  "overrides": {
+    "form-data": "4.0.4"
   }
 }