Vulnerability advisory
GHSA-m95q-7qp3-xv42
Zod denial of service vulnerability
Also known as CVE-2023-4316
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 3.22.3 | 3.22.3Advisories → |
Description
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.
References
- Advisorynvd.nist.gov/vuln/detail/CVE-2023-4316 ↗
- Webgithub.com/colinhacks/zod/issues/2609 ↗
- Webgithub.com/colinhacks/zod/pull/2824 ↗
- Webgithub.com/colinhacks/zod/commit/2ba00fe2377f4d53947a84b8cdb314a63bbd6dd4 ↗
- Webfluidattacks.com/advisories/swift ↗
- Packagegithub.com/colinhacks/zod ↗
- Webgithub.com/colinhacks/zod/releases/tag/v3.22.3 ↗
- Webwww.npmjs.com/package/zod ↗