npm / form-data

form-data

What changed in form-data 3 to 4, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.

1 security1 new APIs and options1 behavior and defaults4 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

form-data 42 changes

Security 1

CR, LF, and double quotes are now escaped in field names and filenames.
2.5.6, 3.0.5, 4.0.6release notes release notes release notes security advisory

Fixes and other changes 1

Sets Symbol.toStringTag in the proper place.
4.0.5release notes

form-data 35 changes

New APIs and options 1

The constructor type now includes readable stream options.
3.0.0release notes

Behavior and default changes 1

The userHeaders parameter is optional in the TypeScript definitions.
3.0.0release notes

Fixes and other changes 3

Options are passed to the constructor when it is called without new.
3.0.0release notes
Fixed the getHeaders method signatures in the TypeScript definitions.
3.0.0release notes
Fixed a memory leak.
3.0.0release notes