CyberRota Analysis
AI-GeneratedThe Zod schema-validation library versions up to 4.6.5 are vulnerable to an uncontrolled resource consumption issue that can be exploited by attackers to deplete memory resources. By submitting large arrays to applications using an array schema without length constraints, attackers can trigger excessive memory allocation, leading to application crashes due to out-of-memory errors. Developers and organizations utilizing this library should prioritize patching or implementing mitigations to prevent potential denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic in $ZodArray, which accumulates every validation issue for each failing element with no cap or early termination, causing the process to allocate excessive issue objects and crash due to out-of-memory conditions.