Zod, a TypeScript-first schema declaration and validation library renowned for its static type inference, released version 1.11.14 on April 25, 2021, following version 1.11.13 which was made available on March 22, 2021. Both versions maintain the same core functionality and developer dependencies. These dependencies include essential tools such as Jest for testing, TSLint for linting, Nodemon for development server management, ts-jest for TypeScript testing with Jest, Prettier for code formatting, and TypeScript itself for type checking. The type definitions for Jest are also included, alongside utilities for coverage badge creation and Prettier configuration for TSLint.
A subtle difference exists in the unpacked size of the distribution, with version 1.11.13 being slightly larger at 314258 bytes compared to version 1.11.14 at 314249 bytes. This suggests minor optimizations or refactoring occurred between releases, potentially reducing the package's footprint. For developers, upgrading to version 1.11.14 offers the benefit of these potential optimizations, though both versions provide a robust foundation for building type-safe applications. The library's MIT license and access to the source code on GitHub remain constant, ensuring open and collaborative development. While the core features remain consistent, staying updated with the latest version is generally recommended to benefit from any bug fixes, performance improvements, or minor refinements that may have been incorporated.
All the vulnerabilities related to the version 1.11.14 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.