Allocation of Resources Without Limits or Throttling

Overview zod is a TypeScript-first schema declaration and validation library with static type inference Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleArrayResult parse logic in $ZodArray, which accumulates every validation...

CVE-2023-54404

Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, set or map to an application that uses a container schema without an explicit size constraint. The handleArrayResult parse logic in...

CVE-2023-54404 Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation

Zod schema-validation library through 4.6.5, fixed in commit e06a510, contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the...

CVE-2023-54404 Zod Uncontrolled Resource Consumption via Unbounded Array, Set, and Map Validation

Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, set or map to an application that uses a container schema without an explicit size constraint. The handleArrayResult parse logic in...

EUVD-2023-60702

Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...

CVE-2023-54404

The Zod schema-validation library (versions through 4.6.5 ) contains an uncontrolled resource consumption vulnerability (CWE-770). An attacker can trigger a Denial of Service (DoS) by submitting a large array of invalid items to an application using an array schema that lacks a length constraint....

PT-2026-103950

Name of the Vulnerable Software and Affected Versions Zod versions prior to 4.6.6 Description An uncontrolled resource consumption issue exists in the schema-validation library where the handleArrayResult parse logic in $ZodArray accumulates every validation issue for each failing element without...

CVE-2023-54404: Allocation of Resources Without Limits or Throttling

Zod schema-validation library through 4.6.5, fixed in commit e06a510, contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the...