Skip to content
OpenAdvisories

Package · npm

validator

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-12758 Public exploit

    Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequen…

    validator npm
  • High 7.5
    CVE-2014-8882

    Regular Expression Denial of Service in validator

    Versions of `validator` prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the `isURL` method. ## Recommendation Update to version 3.22.1 or later.

    validator npm