fix(validation): defensive null check in Zod error formatting

Author: IT-BAER

CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to this project are documented in this file.
 
+## [v0.8.1] - 2026-01-07
+
+### fix
+
+- **Validation**: Fixed crash in Zod error formatting middleware
+  - Added defensive null check in `formatZodErrors` function
+  - Handle cases where `error.errors` is undefined by falling back to `error.issues`
+  - Added safe property access with optional chaining to prevent unhandled rejections
+  - Prevents server crash when validation errors have unexpected structure
+
 ## [v0.8.0] - 2026-01-03
 
 ### feat

middleware/validation/index.js

@@ -15,10 +15,19 @@ const formatZodErrors = (error) => {
     return { message: 'Validation error', errors: [] };
   }
 
-  const errors = error.errors.map(err => ({
-    field: err.path.join('.'),
-    message: err.message,
-    code: err.code,
+  // Defensive check for error.errors being undefined or not an array
+  const zodErrors = error.errors || error.issues || [];
+  if (!Array.isArray(zodErrors)) {
+    return { 
+      message: error.message || 'Validation failed', 
+      errors: [] 
+    };
+  }
+  
+  const errors = zodErrors.map(err => ({
+    field: err.path?.join('.') || '',
+    message: err.message || 'Invalid value',
+    code: err.code || 'validation_error',
   }));
 
   // Create a summary message from the first few errors

package.json

@@ -1,6 +1,6 @@
 {
   "name": "finx",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "A modern personal finance management application",
   "main": "server.js",
   "scripts": {