npm

zod

Security advisories for zod, newest first. 1 known, all fixed. If you’re on 4.6.6 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

4.6.7

Advisories

1 · 0 unfixed

Last advisory

1 Oct 2026

Safe from

4.6.6

1 advisory · newest first

HIGH7.5 1 Oct 2026

Zod can exhaust memory while validating oversized constrained collections

GHSA-mrhx-c7xc-m3w5 · CVE-2023-54404

Affected

< 4.6.6

Fixed in

4.6.6

Published

1 Oct 2026

/advisories/npm/zod/feed.rss

From the GitHub advisory database, via OSV · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →