CVE-2014-9772

The CVE-2014-9772 entry concerns the validator package for Node.js. Affected versions are prior to 2.0.0, where the built-in XSS filter can be bypassed using hex-encoded characters. This can allow bypass of the filter and may enable script execution in contexts that rely on the validator’s XSS pr...

10tcl (>=0.0.6, <=0.0.10), @rtoken/contracts (1.0.1-rc6) +300 more potentially affected by CVE-2014-9772 via validator (>=0.1.8, <=1.5.1)

validator NPM version =0.1.8, =0.0.6, =1.0.1-rc6, =1.0.2, =0.0.9, =0.0.1, =0.0.19, =0.1.0-1, =0.0.2, =0.3.3, =0.5.0, =0.5.0, =1.0.0, =1.0.2 - apostrophe-tumblr 0.5.3 and more Source cves: CVE-2014-9772 Source advisory: MEND:CVE-2014-9772...