Filtered by vendor Zod Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-6991 1 Zod 1 Zod 2026-04-27 6.3 Medium
A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-5986 1 Zod 1 Jsvideourlparser 2026-04-24 5.3 Medium
A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the function getTime in the library lib/util.js. This manipulation of the argument timestamp causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2023-4316 1 Zod 1 Zod 2025-12-03 7.5 High
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails.