Skip to content
OpenAdvisories

Package · npm

@conform-to/yup

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2024-32866

    Conform contains Prototype Pollution Vulnerability in `parseWith...` function

    Conform, a type-safe form validation library, allows the parsing of nested objects in the form of `object.property`. Due to an improper implementation of this feature in versions prior to 1.1.1, an attacker can exploit the feature to trigger prototype polluti…

    edmundhung conform @conform-to/dom @conform-to/zod npm