high7.5
CVE-2023-4316
Zod denial of service vulnerability
Impact
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | zod | <= 3.22.2 | 3.22.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zod | Zod | Version 3.22.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://fluidattacks.com/advisories/swift
- https://www.npmjs.com/package/zod
- https://github.com/advisories/GHSA-m95q-7qp3-xv42
- https://nvd.nist.gov/vuln/detail/CVE-2023-4316
- https://github.com/colinhacks/zod/issues/2609
- https://github.com/colinhacks/zod/pull/2824
- https://github.com/colinhacks/zod/commit/2ba00fe2377f4d53947a84b8cdb314a63bbd6dd4
- https://github.com/colinhacks/zod/releases/tag/v3.22.3