Skip to content
OpenAdvisories

Package · npm

validator

10 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-12758 Public exploit

    Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequen…