conform vulnerabilities

2 known vulnerabilities in conform from Edmundhung. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  conform: Inefficient Algorithmic Complexity

  CVE-2026-49250Sep 14, 2026Edmundhung

  Conform, a type-safe form validation library, allows the parsing of nested objects in the form of object.property. From 1.8.0 until 1.19.4, the parseSubmission future API in packages/conform-dom/formdata.ts repeatedly scans FormData or URLSearchParams entries

• 8.6 High severity

  conform: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-32866Apr 23, 2024Edmundhung

  Conform, a type-safe form validation library, allows the parsing of nested objects in the form of `object.property`. Due to an improper implementation of this feature in versions prior to 1.1.1, an attacker can exploit the feature to trigger prototype pollutio