Description
validator.js is vulnerable to Inefficient Regular Expression Complexity
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| validatorjs | validatorjs/validator.js | unspecified – < 13.7.0 | 13.7.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | validator.js | No fix yet | — |
| Ubuntu 16.04 LTS | validator.js | No fix yet | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | validator | < 13.7.0 | 13.7.0 | GHSA-qgmg-gppg-76g5 |
Advisories 3
- WID-SEC-2023-1542 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
- WID-SEC-2022-1375 JFrog Artifactory: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025
- WID-SEC-2023-0809 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 19, 2024