189 matches found
Malicious Package
Overview import-zod is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in import-zod (npm)
The package 'import-zod' is part of the PhantomRaven supply chain attack campaign Wave 4. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.artifactsnpm.com...
MAL-2026-1330 Malicious code in import-zod (npm)
The package 'import-zod' is part of the PhantomRaven supply chain attack campaign Wave 4. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.artifactsnpm.com...
MAL-2026-346 Malicious code in zod-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6e0134575d22df9c8acb633e41aeb44e167203581cee75c81264667e9bdee The package zod-js was found to contain malicious code. Source: ghsa-malware df349fd5990c0cb74fcaa574f32fd30796c00bbe619ee60bd0eac1a658c7dd49 Any...
EUVD-2026-3270
Malicious code in zod-js npm...
Malicious Package
Overview zod-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in zod-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6e0134575d22df9c8acb633e41aeb44e167203581cee75c81264667e9bdee The package zod-js was found to contain malicious code. Source: ghsa-malware df349fd5990c0cb74fcaa574f32fd30796c00bbe619ee60bd0eac1a658c7dd49 Any...
EUVD-2023-2547
Malicious code in bioql PyPI...
@kentcdodds/workshop-app (>=1.41.0, <=1.46.7), remix-server-kit (>=3.0.0-beta1, <=3.0.0-beta4) potentially affected by CVE-2024-32866 via @conform-to/zod (>=0.5.1, <=0.7.4)
@conform-to/zod NPM version =0.5.1, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...
Regular Expression Denial Of Service (ReDoS)
zod is vulnerable to Denial of Service DoS. The vulnerability is due to an inefficient regex expression that parses email addresses. An attacker can submit long email addresses, which will cause the Zod application to crash or become unresponsive...
Zod denial of service vulnerability during email validation
Impact API servers running express-zod-api having: - version of express-zod-api below 10.0.0-beta1, - and using the following or similar validation schema in its implementation: z.string.email, are vulnerable to a DoS attack due to: - Inefficient Regular Expression Complexity in zod versions up t...
GHSA-MVRP-3CVX-C325 Zod denial of service vulnerability during email validation
Impact API servers running express-zod-api having: - version of express-zod-api below 10.0.0-beta1, - and using the following or similar validation schema in its implementation: z.string.email, are vulnerable to a DoS attack due to: - Inefficient Regular Expression Complexity in zod versions up t...
24social-ui (>=1.0.0, <=1.0.5), 3extensions (1.0.1) +3814 more potentially affected by CVE-2023-4316 via zod (>=3.0.0, <=3.22.2)
zod NPM version =3.0.0, =1.0.0, =0.0.7, =1.0.0, =3.0.0-beta.21, =2.4.0, =1.6.1, =1.0.6, =1.2.4, =0.0.1, =0.1.0, =0.1.23, =0.20.0, =0.0.0-dev-20240828032938, =3.1.0 and more Source cves: CVE-2023-4316 Source advisory: OSV:GHSA-M95Q-7QP3-XV42...
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails...
GHSA-M95Q-7QP3-XV42 Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails...
CVE-2023-4316
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...
Denial of service
Zod in version 3.22.2 allows an attacker to perform a denial of service while validating emails...
CVE-2023-4316
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...
