← All advisories

Medium severity6.1NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026

CVE-2014-9772

CVE-2014-9772

Description

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
validatornpm	< 2.0.0	2.0.0

Affected products

2

Node.js/Node.js
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Range: <=1.8.4
ghsa-coords
pkg:npm/validator
Range: < 2.0.0

Patches

Vulnerability mechanics

References

7

nodesecurity.io/advisories/43nvdExploitMitigationVendor Advisory
www.openwall.com/lists/oss-security/2016/04/20/11nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-79mx-88w7-8f7qghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-9772ghsaADVISORY
www.securityfocus.com/bid/97102nvdWEB
github.com/chriso/validator.js/issues/181ghsaWEB
www.npmjs.com/advisories/43ghsaWEB

News mentions

0

No linked articles in our index yet.