Lucene search
+L

11 matches found

Kitploit
Kitploit
added 2026/09/16 4:21 p.m.8 views

CVE-2025-12758

CVE-2025-12758: Validator.js isLength Unicode Variation Selector 우회 CVE ID: CVE-2025-12758 CVSS Score: 8.7 HIGH Severity: HIGH CWE: CWE-792 특수 요소의 하나 이상 인스턴스에 대한 불완전한 필터링 Published: 2025년 11월 26일 Disclosed: 2025년 10월 19일 취약점 개요 이 취약점은 validator npm 패키지 버전 13.15.22에 영향을 미칩니다. isLength 함수가 문자열 길이를...

8.7CVSS7.1AI score0.00517EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/08 8:43 a.m.54 views

Security Bulletin: Improper Unicode Handling in validator isLength() Leads to Input Length Bypass (Pre-13.15.22) affects watsonx.data

Summary Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string...

8.7CVSS6AI score0.00517EPSS
SaveExploits2Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/28 6:03 a.m.14 views

CVE-2025-12758

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...

8.7CVSS7.1AI score0.00517EPSS
SaveExploits2References1
Github Security Blog
Github Security Blog
added 2025/11/27 6:31 a.m.21 views

Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...

8.7CVSS7AI score0.00517EPSS
SaveExploits2References7Affected Software1
EUVD
EUVD
added 2025/11/27 6:31 a.m.9 views

EUVD-2025-199795

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...

8.7CVSS6.6AI score0.00517EPSS
SaveExploits2References4
OSV
OSV
added 2025/11/27 6:31 a.m.16 views

GHSA-VGHF-HV5Q-VC2G Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...

8.7CVSS7.1AI score0.00517EPSS
SaveExploits2References7
Cvelist
Cvelist
added 2025/11/27 5:00 a.m.29 views

CVE-2025-12758

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...

8.7CVSS0.00517EPSS
SaveExploits2References4
OSV
OSV
added 2025/11/27 5:00 a.m.10 views

CVE-2025-12758

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...

8.7CVSS7.1AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/11/27 5:00 a.m.2 views

CVE-2025-12758

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...

8.7CVSS6.7AI score0.00517EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2025/11/27 12:00 a.m.15 views

PT-2025-48236

Name of the Vulnerable Software and Affected Versions validator versions prior to 13.15.22 Description The package validator, in versions prior to 13.15.22, contains an issue related to incomplete filtering of special elements within the isLength function. Specifically, the function does not...

8.7CVSS4.7AI score0.00517EPSS
SaveExploits2References15
Snyk
Snyk
added 2025/10/18 5:03 p.m.2 views

Incomplete Filtering of One or More Instances of Special Elements

Overview org.webjars.npm:validator is an A library of string validators and sanitizers. Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F...

8.7CVSS4.8AI score0.00517EPSS
SaveExploits2References2
Rows per page
Query Builder