Moderate severity vulnerability that affects validator (GHSA-552w-rqg8-gxxm)

Description

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.

Recommendation

Update the validator package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.1.0
• Patched version(s): 1.1.0

References

• GHSA-552w-rqg8-gxxm
• www.openwall.com
• CVE-2013-7453
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Moderate severity vulnerability that affects validator (GHSA-rh6c-q938-3r9q) - CVE-2013-7452
• Strapi core vulnerable to sensitive data exposure via CORS misconfiguration - CVE-2025-53092
• Webrecorder packages are vulnerable to XSS through 404 error handling logic - CVE-2025-58765
• HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit - Vulnerability

Tags:

npm

validator