Skip to content
OpenAdvisories

Package · Wolfi

saf

104 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

41 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-56200

    validator.js has a URL validation bypass vulnerability in its isURL function

    A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and …

    sqlpad saf validator validator.js Ubuntu Wolfi npm