Skip to content
OpenAdvisories

Weakness (CWE)

CWE-792: Incomplete Filtering of One or More Instances of Special Elements

Variant Incomplete

The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

Source: MITRE CWE-792

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-12758 Public exploit

    Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequen…

    validator npm