Lucene search
+L

10 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2026/04/08 8:43 a.m.52 views

Security Bulletin: Improper Unicode Handling in validator isLength() Leads to Input Length Bypass (Pre-13.15.22) affects watsonx.data

Summary Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string...

8.7CVSS6AI score0.00506EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder