Validator Project - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2025-11-27.

Products

• Validator - 3 CVEs

Newest CVEs of Validator Project

• CVE-2025-12758 - CVSS 8.7 (high), 2025-11-27: Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength()…
• CVE-2025-56200 - CVSS 6.1 (medium), 2025-09-30: A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols,…
• CVE-2021-3765 - CVSS 7.5 (high), 2021-11-02: validator.js is vulnerable to Inefficient Regular Expression Complexity