20 matches found
CVE-2014-8882
Versions of "validator" prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the "isURL" method...
URL Validation Bypass
validator.js is vulnerable to a URL Validation Bypass. The vulnerability is due to isURL using :// instead of : to parse protocols, allowing attackers to craft URLs that bypass protocol and domain checks and potentially enable XSS or open-redirect attacks...
EUVD-2007-3017
Malware in sbrugna...
EUVD-2025-31764
Malicious code in bioql PyPI...
UBUNTU-CVE-2025-56200
A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leadi...
CVE-2025-56200: Improper Neutralization of Input During Web Page Generation
A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leadi...
CVE-2025-56200
A URL validation bypass vulnerability exists in the validator.js library through version 13.15.15 . The root cause is a discrepancy in protocol parsing: the isURL() function uses :// as a delimiter, whereas browsers use :, allowing attackers to craft malicious URLs that bypass domain and protocol...
CVE-2025-56200
A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leadi...
CVE-2007-3025
Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service hang via unknown vectors related to the isURL function and regular expressions...
Docsify XSS Vulnerability
This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1 When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking plac...
CVE-2021-23342
This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1 When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking plac...
Authentication flaw
This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1 When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking plac...
CVE-2021-23342
This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1 When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking plac...
CVE-2021-23342: Improper Neutralization of Input During Web Page Generation
This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1 When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking plac...
PT-2021-15446
Name of the Vulnerable Software and Affected Versions docsify versions prior to 4.12.0 Description The issue allows for the bypass of previous remediation efforts, enabling the execution of malicious JavaScript through two methods. Firstly, when parsing HTML from remote URLs, the main page's HTML...
Regular Expression Denial of Service in validator
Versions of validator prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the isURL method. Recommendation Update to version 3.22.1 or later...
PT-2020-7758
Name of the Vulnerable Software and Affected Versions validator versions prior to 3.22.1 Description The issue is related to a regular expression denial of service vulnerability in the isURL method. Recommendations Update to version 3.22.1 or later...
Regular Expression Denial of Service
Overview Versions of validator prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the isURL method. Recommendation Update to version 3.22.1 or later. References - Issue 152, Comment 48107184 - GitHub Advisory...
CVE-2007-3025
Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service hang via unknown vectors related to the isURL function and regular expressions...
CVE-2007-3025: Undefined Security Weakness
Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service hang via unknown vectors related to the isURL function and regular expressions...