{"id":"EUVD-2023-60702","enisaUuid":"b7251875-f283-3759-8f44-a045e128c8f8","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than a defect in Zod.","datePublished":"Oct 1, 2026, 5:11:13 PM","dateUpdated":"Oct 28, 2026, 9:17:22 PM","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"","aliases":"CVE-2023-54404\nGHSA-mrhx-c7xc-m3w5\n","assigner":"VulnCheck","epss":0.35,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"1f087a73-af75-3a27-9500-3c3c95cacd9b","vulnerability":{"id":"GHSA-mrhx-c7xc-m3w5","description":"Zod can exhaust memory while validating oversized constrained collections","datePublished":"Oct 1, 2026, 6:32:46 PM","dateUpdated":"Oct 23, 2026, 6:26:50 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2023-54404\nhttps://github.com/colinhacks/zod/issues/1872\nhttps://github.com/colinhacks/zod/pull/6475\nhttps://github.com/colinhacks/zod/pull/6652\nhttps://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd\nhttps://github.com/colinhacks/zod\nhttps://www.vulncheck.com/advisories/zod-uncontrolled-resource-consumption-via-array-validation\n","enisa_id":"EUVD-2023-60702\n","aliases":"CVE-2023-54404\nGHSA-mrhx-c7xc-m3w5\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 11:00:32 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"4efe3246-2c5a-3801-a74c-c40461afb3a1","vulnerability":{"id":"CVE-2023-54404","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than a defect in Zod.","datePublished":"Oct 1, 2026, 5:11:13 PM","dateUpdated":"Oct 28, 2026, 9:17:22 PM","status":"REJECTED","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"","enisa_id":"EUVD-2023-60702\n","assigner":"VulnCheck","epss":0.35,"dataProcessed":"Oct 29, 2026, 9:00:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}