Homepage

validator@13.15.20 vulnerabilities

String validation and sanitization

  • latest version

    13.15.23

  • latest non vulnerable version

    13.15.23

  • first published

    14 years ago

  • latest version published

    1 months ago

  • licenses detected

  • View validator package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the validator package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Incomplete Filtering of One or More Instances of Special Elements

    validator is a library of string validators and sanitizers.

    Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequence which lead to improper string length calculation. This can lead to an application using isLength for input validation accepting strings significantly longer than intended, resulting in issues like data truncation in databases, buffer overflows in other system components, or denial-of-service.

    How to fix Incomplete Filtering of One or More Instances of Special Elements?

    Upgrade validator to version 13.15.22 or higher.

    <13.15.22
    Go back to all versions of this package