**Related:** - Related issue: https://github.com/HubSpot/hubspot-api-nodejs/issues/650 - Related CVE: https://nvd.nist.gov/vuln/detail/CVE-2025-7783 - Related github advisory: https://github.com/advisories/GHSA-fjxv-7rqg-78g4 **Issue:** ``` ➜ clean git:(main) ✗ pnpm -r why form-data@3 Legend: production dependency, optional only, dev only api@1.0.0 /Users/richard/code/clean/apps/api dependencies: @hubspot/api-client 13.4.0 └─┬ @types/node-fetch 2.6.2 └── form-data 3.0.1 ``` https://github.com/HubSpot/hubspot-api-nodejs/issues/650 fixed the direct import of `form-data` but `@types/node-fetch@2.6.2` uses the old version of `form-data` **Fix** PR raised: https://github.com/HubSpot/hubspot-api-nodejs/pull/679