From b867111d5fb45b53090be886630f0589718cc96d Mon Sep 17 00:00:00 2001
From: DeepSource Bot <bot@deepsource.io>
Date: Wed, 29 Jul 2026 09:47:56 +0000
Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20npm/form-data=20from=204.?=
 =?UTF-8?q?0.2=20=E2=86=92=204.0.6=20fix(deps):=20update=20npm/form-data?=
 =?UTF-8?q?=20from=204.0.2=20=E2=86=92=204.0.6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes.

### Upgrade Summary

**form-data**: 4.0.2 → 4.0.6

- Fixes [CVE-2026-12143](https://nvd.nist.gov/vuln/detail/CVE-2026-12143) (High severity)

- References:

  - [https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx](https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx)

  - [https://nvd.nist.gov/vuln/detail/CVE-2026-12143](https://nvd.nist.gov/vuln/detail/CVE-2026-12143)

  - [https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435](https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435)

  - [https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229](https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229)

  - [https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045](https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045)

  - [https://github.com/form-data/form-data](https://github.com/form-data/form-data)

  - [https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data](https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data)

  - [https://www.npmjs.com/package/form-data](https://www.npmjs.com/package/form-data)

---

🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.com/gh/QuackatronHQ/sca-kitchen-sink/dependencies/).
---
 javascript/npm/package-lock.json | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/javascript/npm/package-lock.json b/javascript/npm/package-lock.json
index 1d54caa..b8051de 100644
--- a/javascript/npm/package-lock.json
+++ b/javascript/npm/package-lock.json
@@ -279,15 +279,16 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.2.tgz",
-      "integrity": "sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==",
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz",
+      "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
         "es-set-tostringtag": "^2.1.0",
-        "mime-types": "^2.1.12"
+        "hasown": "^2.0.4",
+        "mime-types": "^2.1.35"
       },
       "engines": {
         "node": ">= 6"
@@ -379,9 +380,9 @@
       }
     },
     "node_modules/hasown": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
-      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
       "license": "MIT",
       "dependencies": {
         "function-bind": "^1.1.2"