Moderate severity vulnerability that affects validator (GHSA-552w-rqg8-gxxm)

Description

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.

Recommendation

Update the validator package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.1.0
• Patched version(s): 1.1.0

References

• GHSA-552w-rqg8-gxxm
• www.openwall.com
• CVE-2013-7453
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Moderate severity vulnerability that affects validator (GHSA-rh6c-q938-3r9q) - CVE-2013-7452
• DOM Clobbering Gadget found in astro's client-side router that leads to XSS - CVE-2024-47885
• @strapi/plugin-content-manager leaks data via relations via the Admin Panel - CVE-2024-29181
• Potential leakage of Sentry auth tokens by React Native SDK with Expo plugin - Vulnerability

Tags:

npm

validator