Inefficient Regular Expression Complexity in validator.js

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-3765 · ADVISORY
• validatorjs/validator.js commit 496fc8b · WEB
• validatorjs/validator.js · PACKAGE
• huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9 · WEB

validator のその他の脆弱性

• CVE-2025-12758高 7.5Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the…
• CVE-2025-56200中 6.1A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to par…