valib

Releases2

Frequency1 month 3 weeks

Last Release about 12 years ago

A validation library for both the browser and Node.js

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-10805 ↗	Feb 28, 2020Friday, 28 February 2020, 21:15	7.5 HIGH	5 MEDIUM
valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is possible for a crafted payload to overwrite this function to manipulate the inspection results to bypass security checks.