logo

Database

Asymmetric denial of service In grafana

Description

A flaw was found in zod. A remote attacker can trigger a denial of service (DoS) by submitting an excessively large array of invalid items to an application that validates input schemas without length constraints. Because the validation process accumulates error records for each failing element without a cap or early exit, the application consumes excessive memory and crashes due to an out-of-memory condition.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component