Moderate severity vulnerability that affects validator

Description

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag.

Recommendation

Update the validator package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.1.0
• Patched version(s): 1.1.0

References

• GHSA-qpjp-7rp2-9c3f
• www.openwall.com
• CVE-2013-7451
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Moderate severity vulnerability that affects validator (GHSA-552w-rqg8-gxxm) - CVE-2013-7453
• Moderate severity vulnerability that affects validator (GHSA-rh6c-q938-3r9q) - CVE-2013-7452
• Moderate severity vulnerability that affects marked - CVE-2017-17461
• Critical severity vulnerability that affects slpjs - CVE-2019-16762

Tags:

npm

validator