Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6991 SQL Injection in colinhacks Zod Up to 4.3.6 CUID Data Type Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6991
Post summary
The note references CVE-2026-6991 as a SQL Injection flaw in the colinhacks Zod library (versions ≤ 4.3.6) targeting the CUID data type handler, without mentioning PoC, exploits, or remediation.
CVE-2026-6991 A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the compone… https://www.cve.org/CVERecord?id=CVE-2026-6991
Post summary
The post reports the discovery of CVE‑2026‑6991 in colinhacks Zod up to version 4.3.6, noting the problematic function in a specific file path but providing no further exploitation or remediation details.