Validator Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Validator Project records in CISA KEV

No Validator Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Validator 3 records HIGH

Records

3 records in Validator · all components

TI-2025-11693 CVE-2025-12758 · GHSA-vghf-hv5q-vc2g

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering…

HIGH 77

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00554 Published 2025-11-27 Fixed in 13.15.22 CWE-792

TI-2021-02697 CVE-2021-3765 · GHSA-qgmg-gppg-76g5

Inefficient Regular Expression Complexity in validatorjs/validator.js

LOW 36

validator.js is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01792 Published 2021-11-02 Partial fix · 13.7.0 CWE-1333

TI-2025-35268 CVE-2025-56200 · GHSA-9965-vmph-33xx

A URL validation bypass vulnerability exists in validator.js through version 13.15.15.

LOW 27

A URL validation bypass vulnerability exists in validator.js through version 13.15.15.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00324 Published 2025-09-30 Fixed in 13.15.20 CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0