Conform contains a Prototype Pollution Vulnerability in `parseWith...` function

Summary Conform allows the parsing of nested objects in the form of object.property. Due to an improper implementation of this feature, an attacker can exploit it to trigger prototype pollution by passing a crafted input to parseWith... functions. PoC javascript const parseWithZod =...

Conform 安全漏洞

Conform is a type-safe form validation library from the Edmund Hung Personal Developer. A security vulnerability exists in Conform 1.1.0 and earlier versions, which stems from allowing an attacker to trigger prototype contamination by passing specially crafted input to parseWith...