TypeScript-first schema declaration and validation library with static type inference
91%
Total Score
70
95
90
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-161437 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. zod is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 3.21.0 - 4.4.3. | 3.21.0 - 4.4.3 | Low |
AIKIDO-2026-500926 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. zod is vulnerable to Prototype Pollution in versions 4.0.0 - 4.4.3. | 4.0.0 - 4.4.3 | Low |
AIKIDO-2026-10707 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. zod is vulnerable to Prototype Pollution in versions 1.0.0 - 4.3.6. | 1.0.0 - 4.3.6 | Medium |
AIKIDO-2026-10706 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. zod is vulnerable to Improper Input Validation in versions 1.0.0 - 4.3.6. | 1.0.0 - 4.3.6 | Medium |
CVE-2023-4316 zod is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 3.22.2. | 0.0.0 - 3.22.2 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.