Skip to content
OpenAdvisories

Package · npm

class-validator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.7
    CVE-2019-18413

    SQL Injection and Cross-site Scripting in class-validator

    In TypeStack class-validator 0.10.2, validate() input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk …

    class-validator npm