Skip to content
OpenAdvisories

Package · Ubuntu

validator.js

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.1

    validator.js has a URL validation bypass vulnerability in its isURL function

    A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and …

  • Medium 5.3

    Inefficient Regular Expression Complexity in validatorjs/validator.js

    validator.js is vulnerable to Inefficient Regular Expression Complexity