Description
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | validator | < 1.1.0 | 1.1.0 | GHSA-q4qq-fm7q-cwp5 |