~ / search / GHSA-rh6c-q938-3r9q

GHSA-rh6c-q938-3r9q

Moderate severity vulnerability that affects validator

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-7452

Packages

EcosystemPackageAffectedFixed in
npm validator < 1.1.0 1.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI.

References

External links from the advisory. They lead to third-party sites.