Incomplete Filtering of One or More Instances of Special Elements
CWE-792
The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 7.5.
Latest Incomplete Filtering of One or More Instances of Special Elements vulnerabilities
- 7.5 High severity
validator: Incomplete Filtering of One or More Instances of Special Elements
Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequenc