input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7452 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7452 Source advisory: OSV:GHSA-RH6C-Q938-3R9Q...

10tcl (>=0.0.6, <=0.0.10), @rtoken/contracts (1.0.1-rc6) +120 more potentially affected by CVE-2013-7452 via validator (>=0.1.8, <=1.0.0)

validator NPM version =0.1.8, =0.0.6, =1.0.1-rc6, =1.0.2, =0.0.1, =0.1.0-1, =0.3.3, =0.5.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.9 - azure 0.6.9-zumo and more Source cves: CVE-2013-7452 Source advisory: MEND:CVE-2013-7452...

CVE-2013-7452

The CVE-2013-7452 issue affects the Node.js validator module prior to version 1.1.0. The root cause is a flaw that allows remote attackers to bypass the cross-site scripting (XSS) filter when processing a crafted javascript URI. The impact described is bypassing the XSS filter; no other effects a...