Validator Project Validator — known CVE vulnerabilities

Every CVE whose affected-product data names Validator Project Validator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-3765 — CVSS 7.5 (high): validator.js is vulnerable to Inefficient Regular Expression Complexity
• CVE-2025-12758 — CVSS 7.5 (high): Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in…
• CVE-2025-56200 — CVSS 6.1 (medium): A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to…