Skip to content

CVE-2023-4316

CVE-2023-4316 · Zod 3.22.2 - Regular expression Denial of Service

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails.

CVSS 7.5 · High · EPSS 0.9% · Fix available

Published: 2023-09-28T20:34:09.161Z
Updated: 2025-12-03T20:17:51.613Z

Stack: node

Affected products and versions

zod
Versions
- ≥ 3.21.0, ≤ 3.22.3: Affected (custom)
No fix published
zod npm
Affected ranges
- SEMVER: < 3.22.3
Update to 3.22.3

Original sources

Check your server →