Packages / validator / Security

ModerateVulnerabilityGHSA-xx4c-jj58-r7x6Published 19 Nov 2021

Inefficient Regular Expression Complexity in Validator.js

Your version

Affected releases · validator

  • 13.x13.0.0 – 13.6.0Fixed in 13.7.0
  • 12.x and older11.1.0 – 12.2.0No fix, no longer updated

On 13.x, the newest line:

npm install validator@13.7.0
Every release on a timeline
13.x

  1. Affected

    13.0.0 – 13.6.0

    8 releases

  2. Fixed

    13.7.0 – 13.15.35

    11 releases, latest

12.x

  1. Affected

    12.0.0 – 12.2.0

    3 releases

11.x

  1. Not affected

    11.0.0

    1 release

  2. Affected

    11.1.0

    1 release

215 stable releases of validator, oldest to newest, one row per major.

What happens

Impact

Versions of validator prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the rtrim and trim sanitizers.

Patches

The problem has been patched in validator 13.7.0