CVE-2026-49250
1 advisory.
npm/@conform-to/dom CVE-2026-49250: high, EPSS 0.51%
@conform-to/dom parseSubmission vulnerable to CPU exhaustion when parsing many unique form fields
Action: Upgrade @conform-to/dom to 1.19.4 or later.
npm i @conform-to/dom@1.19.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.8.0 | 1.19.4 | - |
Fixed versions
| 1.19.4 |
Sources
- osv: GHSA-525m-7f82-2mf7
- https://github.com/edmundhung/conform/security/advisories/GHSA-525m-7f82-2mf7
- https://github.com/edmundhung/conform
CVE-2026-49250 · published · modified · JSON