VYPR

Typestack Class Validator

by Typestack Class Validator Project

CVEs (1)

  • CVE-2019-18413LowOct 24, 2019
    risk 0.00cvss 3.7epss 0.02

    In TypeStack class-validator 0.10.2, validate() input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk of this bypass, this…