Skip to content
OpenAdvisories

Package · npm

validator

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 7.5
    CVE-2025-12758 Public exploit

    Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequen…

    validator npm
  • Medium 6.1
    CVE-2025-56200

    validator.js has a URL validation bypass vulnerability in its isURL function

    A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and …

    validator validator.js Ubuntu npm
  • Medium 5.3
    GHSA-xx4c-jj58-r7x6

    Inefficient Regular Expression Complexity in Validator.js

    ### Impact Versions of `validator` prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the `rtrim` and `trim` sanitizers. ### Patches The problem has been patched in validator 13.7.0

    validator npm
  • Medium 5.3
    CVE-2021-3765

    Inefficient Regular Expression Complexity in validatorjs/validator.js

    validator.js is vulnerable to Inefficient Regular Expression Complexity

    validatorjs validatorjs/validator.js validator validator.js Ubuntu npm
  • High 7.5
    CVE-2014-8882

    Regular Expression Denial of Service in validator

    Versions of `validator` prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the `isURL` method. ## Recommendation Update to version 3.22.1 or later.

    validator npm
  • Medium 6.1
    CVE-2013-7454

    Multiple XSS Filter Bypasses in validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.

    validator npm
  • Medium 6.1
    CVE-2013-7451

    Moderate severity vulnerability that affects validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag.

    validator npm
  • Medium 6.1
    CVE-2013-7453

    Moderate severity vulnerability that affects validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.

    validator npm
  • Medium 6.1
    CVE-2013-7452

    Moderate severity vulnerability that affects validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI.

    validator npm
  • Medium 6.1
    CVE-2014-9772

    XSS Filter Bypass via Encoded URL in validator

    The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.

    validator npm