CVE-2025-12758

CVE-2025-12758 affects versions of the validator package prior to 13.15.22, stemming from an incomplete filtering vulnerability in the isLength() function. This flaw allows attackers to bypass intended string length validation by injecting Unicode variation selectors, leading to miscalculated string lengths. With a CVSS score of 7.5 (High), this vulnerability can result in denial-of-service, data truncation, or buffer overflows. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low immediate threat but requiring patching.