{"id":"CVE-2023-54404","published":"2026-10-01T18:17:11.040","lastModified":"2026-10-06T02:17:01.560","description":"Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic in $ZodArray, which accumulates every validation issue for each failing element with no cap or early termination, causing the process to allocate excessive issue objects and crash due to out-of-memory conditions.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-770"],"vendors":[],"products":[],"references":[{"url":"https://github.com/colinhacks/zod/issues/1872","tags":[]},{"url":"https://github.com/colinhacks/zod/pull/6475","tags":[]},{"url":"https://www.vulncheck.com/advisories/zod-uncontrolled-resource-consumption-via-array-validation","tags":[]}],"exploitRefs":[{"url":"https://github.com/colinhacks/zod/issues/1872","tags":[]},{"url":"https://github.com/colinhacks/zod/pull/6475","tags":[]}],"hasPoc":true,"ai":{"summary":"Zod's array validation logic fails to limit memory usage when processing large arrays without length constraints, leading to excessive memory allocation and potential application crashes from out-of-memory conditions.","exploitability":"Exploitation is straightforward with minimal preconditions - attackers only need to submit a large array to any endpoint using an unconstrained Zod array schema to trigger the memory exhaustion vulnerability.","blast_radius":"The vulnerability affects any application using Zod's array validation without length constraints, potentially causing widespread service disruption across web applications and APIs that validate user input through Zod schemas.","remediation":"Upgrade to Zod version 4.6.6 or later to address the uncontrolled resource consumption vulnerability in array validation logic.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["validation","memory","api"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:03:59.580Z"}}