AIKIDO-2024-10424

express-zod-api is vulnerable to Generation of Error Message Containing Sensitive Information

30

Low

express-zod-api js

AIKIDO-2024-10424: express-zod-api is vulnerable to Generation of Error Message Containing Sensitive Information in versions 1.0.0 - 20.17.0.

Generation of Error Message Containing Sensitive Information
Vuln in 1.0.0 - 20.17.0
Fixed in 20.18.0
No CVE available
TL;DR

Affected versions of the package are vulnerable to generation of error message containing sensitive information.

Who does this affect?

You're affected if you are using a version which is within vulnerability ranges.

How can it be fixed?

Upgrade express-zod-api library to patch version.

Background info

Link to vendor website

Logo
© 2024 Aikido Security BV | BE0792914919
🇪🇺 Grauwpoort 1, 9000 Ghent, Belgium
🇺🇸 95 Third St, 2nd Fl, San Francisco, CA 94103, US