Description
validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression Complexity
Recommendation
Update the validator package to the latest compatible version. Followings are version details:
- Affected version(s): < 13.7.0
- Patched version(s): 13.7.0
References
Related Issues
- Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements - CVE-2025-12758
- node-forge is vulnerable to ASN.1 OID Integer Truncation - CVE-2025-66030
- authkit-nextjs may let session cookies be cached in CDNs - CVE-2025-64762
- @perfood/couch-auth may expose session tokens, passwords - CVE-2025-60794
- Tags:
- npm
- validator
Anything's wrong? Let us know Last updated on November 29, 2023