Intel

AIKIDO-2024-10304

fastify-type-provider-zod is vulnerable to Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Oct 1, 2024

38

Low Risk

This Affects:

jsfastify-type-provider-zod
3.0.0 - 4.0.0
Fixed in 4.0.1
Are you affected? Scan for Free

TL;DR

Affected versions of the package may generate error messages containing sensitive information.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

fastify-type-provider-zod is vulnerable to Generation of Error Message Containing Sensitive Information in versions 3.0.0 - 4.0.0.

How to fix this

Upgrade the fastify-type-provider-zod library to the patch version.