zod

Le texte simplifié n'apparaît que s'il est déjà en cache. Cette page ne le génère pas.

Zod can exhaust memory while validating oversized constrained collections

Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic in $ZodArray, which accumulates every validation issue for each failing element with no cap or early termination, causing the process to allocate excessive issue objects and crash due to out-of-memory conditions.

Le texte simplifié n'apparaît que s'il est déjà en cache. Cette page ne le génère pas.

Zod denial of service vulnerability

Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.