PT-2025-48236

🗓️ 27 Nov 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Versions before 13.15.22 miscalculate length due to Unicode variation selectors, enabling long inputs and denial of service.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: User Entity Behavior Analytics App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	28 Jan 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.17.0 shipped with IBM Cloud Pak for Business Automation iFixes for April 2026	27 May 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	30 Jan 202617:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service (CVE-2025-12758, CVE-2025-13466, CVE-2025-14874) and loss of confidentiality (CVE-2025-65945)	5 Feb 202612:45	–	ibm
IBM Security Bulletins	Security Bulletin: Improper Unicode Handling in validator isLength() Leads to Input Length Bypass (Pre-13.15.22) affects watsonx.data	8 Apr 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services before 4.6.20 shipped with IBM Cloud Pak for Business Automation iFixes for January 2026.	17 Mar 202617:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Incomplete Filtering of One or More Instances of Special Elements due to node module validator (CVE-2025-12758)	19 Dec 202504:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	24 Mar 202621:49	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Node.js and LangChain	25 Feb 202616:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Endpoint Management is vulnerable to improper input validation( CVE-2025-12758)	10 Feb 202607:18	–	ibm

Source	Link
github	www.github.com/validatorjs/validator.js
gist	www.gist.github.com/koral--/ad31208b25b9e3d1e2e35f1d4d72572e
t	www.t.me/cveNotify/147141
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12758
security	www.security.snyk.io/vuln/SNYK-JS-VALIDATOR-13653476
t	www.t.me/cveNotify/150334
twitter	www.twitter.com/CVEnew/status/1993912051651998011
github	www.github.com/validatorjs/validator.js/commit/d457ecaf55b0f3d8bd379d82757425d0d13dd382
osv	www.osv.dev/vulnerability/CVE-2025-12758
github	www.github.com/validatorjs/validator.js/pull/2616

29 Jan 2026 00:00Current

4.7Medium risk

Vulners AI Score4.7

CVSS 48.7

CVSS 3.17.5

EPSS0.00112

SSVC