input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7452 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7452 Source advisory: OSV:GHSA-RH6C-Q938-3R9Q...

CVE-2013-7452

The CVE-2013-7452 issue affects the Node.js validator module prior to version 1.1.0. The root cause is a flaw that allows remote attackers to bypass the cross-site scripting (XSS) filter when processing a crafted javascript URI. The impact described is bypassing the XSS filter; no other effects a...