Vulnerabilities

TI-2025-11693 CVE-2025-12758 · GHSA-vghf-hv5q-vc2g

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering…

HIGH 77

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00554 Published 2025-11-27 Fixed in 13.15.22 CWE-792

TI-2025-35268 CVE-2025-56200 · GHSA-9965-vmph-33xx

A URL validation bypass vulnerability exists in validator.js through version 13.15.15.

LOW 27

A URL validation bypass vulnerability exists in validator.js through version 13.15.15.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00324 Published 2025-09-30 Fixed in 13.15.20 CWE-79

TI-2021-02697 CVE-2021-3765 · GHSA-qgmg-gppg-76g5

Inefficient Regular Expression Complexity in validatorjs/validator.js

LOW 36

validator.js is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01792 Published 2021-11-02 Partial fix · 13.7.0 CWE-1333

Vulnerabilities

Filters

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering…

A URL validation bypass vulnerability exists in validator.js through version 13.15.15.

Inefficient Regular Expression Complexity in validatorjs/validator.js