Please report suspected security vulnerabilities privately through GitHub Security Advisories:
https://github.com/colinhacks/zod/security/advisories/new
If you can't use GitHub, email security@zod.dev.
Do not open a public issue for a suspected vulnerability. Include enough detail to reproduce the issue, the affected version or commit, and any known mitigations.
Security fixes are published in the latest release line. Older major versions may receive fixes at maintainer discretion.