Skip to content
OpenAdvisories

Package · npm

@conform-to/dom

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-49250

    Conform: parseSubmission vulnerable to CPU exhaustion when parsing many unique form fields

    Conform, a type-safe form validation library, allows the parsing of nested objects in the form of object.property. From 1.8.0 until 1.19.4, the parseSubmission future API in packages/conform-dom/formdata.ts repeatedly scans FormData or URLSearchParams entries…

    edmundhung conform @conform-to/dom npm
  • High 8.6
    CVE-2024-32866

    Conform contains Prototype Pollution Vulnerability in `parseWith...` function

    Conform, a type-safe form validation library, allows the parsing of nested objects in the form of `object.property`. Due to an improper implementation of this feature in versions prior to 1.1.1, an attacker can exploit the feature to trigger prototype polluti…

    edmundhung conform @conform-to/dom @conform-to/yup npm