Skip to content
OpenAdvisories

Package · npm

validator

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-56200

    validator.js has a URL validation bypass vulnerability in its isURL function

    A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and …

    validator validator.js Ubuntu npm
  • Medium 5.3
    GHSA-xx4c-jj58-r7x6

    Inefficient Regular Expression Complexity in Validator.js

    ### Impact Versions of `validator` prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the `rtrim` and `trim` sanitizers. ### Patches The problem has been patched in validator 13.7.0

    validator npm
  • Medium 5.3
    CVE-2021-3765

    Inefficient Regular Expression Complexity in validatorjs/validator.js

    validator.js is vulnerable to Inefficient Regular Expression Complexity

    validatorjs validatorjs/validator.js validator validator.js Ubuntu npm
  • Medium 6.1
    CVE-2013-7454

    Multiple XSS Filter Bypasses in validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.

    validator npm
  • Medium 6.1
    CVE-2013-7451

    Moderate severity vulnerability that affects validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag.

    validator npm
  • Medium 6.1
    CVE-2013-7453

    Moderate severity vulnerability that affects validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.

    validator npm
  • Medium 6.1
    CVE-2013-7452

    Moderate severity vulnerability that affects validator

    The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI.

    validator npm
  • Medium 6.1
    CVE-2014-9772

    XSS Filter Bypass via Encoded URL in validator

    The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.

    validator npm