Description
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | validator | < 1.1.0 | 1.1.0 | GHSA-qpjp-7rp2-9c3f |
Medium · 6.1
CVE-2013-7451
EUVD-2017-0291GHSA-qpjp-7rp2-9c3f
Moderate severity vulnerability that affects validator
Published Jan 23, 2017 · Updated Aug 6, 2024 · Assigned by mitre