Moderate severity vulnerability that affects validator (GHSA-552w-rqg8-gxxm)

Description

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.

Recommendation

Update the validator package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.1.0
• Patched version(s): 1.1.0

References

• GHSA-552w-rqg8-gxxm
• www.openwall.com
• CVE-2013-7453
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Moderate severity vulnerability that affects validator (GHSA-rh6c-q938-3r9q) - CVE-2013-7452
• Moderate severity vulnerability that affects validator - CVE-2013-7451
• Moderate severity vulnerability that affects marked - CVE-2017-17461
• XSS vulnerability that affects bootstrap (GHSA-3mgp-fx93-9xv5) - CVE-2018-20676

Tags:

npm

validator