CVE-2025-7783: form-data uses unsafe random function in form-data for choosing boundary

[christopher-exx]

Dependabot has reported the following vulnerabilities:

• GHSA-fjxv-7rqg-78g4
• GHSA-rm8p-cx58-hcvx

Both are dependencies of the same package openapitools/openapi-generator-cli

Csaf-validator-service is not affected by this vulnerability because :

Csag-validator-service uses this package only for development, but not for production.

This is shown in the following VEX:

bsi-2025-0004.json