CVE-2023-54404
zod: zod: Denial of service via unbounded array validation
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than a defect in Zod.
CVSS 3.1 · 7.5 High
EPSS n/a
KEV · Not listed
Vendors
Products