Zod denial of service vulnerability during email validation

Impact API servers running express-zod-api having: - version of express-zod-api below 10.0.0-beta1, - and using the following or similar validation schema in its implementation: z.string.email, are vulnerable to a DoS attack due to: - Inefficient Regular Expression Complexity in zod versions up t...

24social-ui (>=1.0.0, <=1.0.5), 3extensions (1.0.1) +3810 more potentially affected by CVE-2023-4316 via zod (>=3.0.0, <=3.22.2)

zod NPM version =3.0.0, =1.0.0, =0.0.7, =1.0.0, =3.0.0-beta.21, =2.4.0, =1.6.1, =1.0.6, =1.2.4, =0.0.1, =0.1.0, =0.1.23, =0.20.0, =0.0.0-dev-20240828032938, =3.1.0 and more Source cves: CVE-2023-4316 Source advisory: OSV:GHSA-M95Q-7QP3-XV42...

CVE-2023-4316

Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...

CVE-2023-4316

CVE-2023-4316 affects Zod versions 3.21.0 through 3.22.3, enabling denial-of-service when validating emails due to inefficient regex handling. Affected software: Zod (JavaScript/TypeScript). Root cause: regex-based email validation can be exploited to exhaust resources. Impact: DoS during email v...

CVE-2023-4316 Zod 3.22.2 - Regular expression Denial of Service

Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...