Security Advisory
CVE-2014-9772
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.