18 matches found
Zod Can Exhaust Memory While Validating Oversized Constrained Collections
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...
SUSE CVE-2023-54404
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than ...
Linux Distros Unpatched Vulnerability : CVE-2023-54404
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, s...
Zod can exhaust memory while validating oversized constrained collections
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...
GHSA-MRHX-C7XC-M3W5 Zod can exhaust memory while validating oversized constrained collections
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...
Allocation of Resources Without Limits or Throttling
Amendment This was deemed not a vulnerability. Overview org.webjars.npm:zod is a TypeScript-first schema declaration and validation library with static type inference Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleArrayResult...
Allocation of Resources Without Limits or Throttling
Overview zod is a TypeScript-first schema declaration and validation library with static type inference Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleArrayResult parse logic in $ZodArray, which accumulates every validation...
CVE-2023-54404
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator...
CVE-2023-54404 Zod Uncontrolled Resource Consumption via Unbounded Array, Set, and Map Validation
Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, set or map to an application that uses a container schema without an explicit size constraint. The handleArrayResult parse logic in...
CVE-2023-54404
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...
EUVD-2023-60702
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...
CVE-2023-54404
The Zod schema-validation library is vulnerable to an uncontrolled resource consumption vulnerability. An attacker can exhaust memory by submitting a large array, set, or map to an application using a container schema without an explicit size constraint. The handleArrayResult parse logic in $ZodA...
Colin McDonnell Zod resource management error vulnerability
Colin McDonnell Zod versions 4.6.5 and earlier contain a resource management error vulnerability. This vulnerability arises from the absence of length constraints in array patterns; when attackers submit large arrays, the handleArrayResult parsing logic within $ZodArray accumulates all validation...
PT-2026-122438
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...
CVE-2023-54404: Allocation of Resources Without Limits or Throttling
Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, set or map to an application that uses a container schema without an explicit size constraint. The handleArrayResult parse logic in...
PT-2026-103950
Name of the Vulnerable Software and Affected Versions Zod versions prior to 4.6.6 Description An uncontrolled resource consumption issue exists in the schema-validation library where the handleArrayResult parse logic in $ZodArray accumulates every validation issue for each failing element without...