Karol Wrótniak

**Name of the Vulnerable Software and Affected Versions** validator versions prior to 13.15.22 **Description** The package validator, in versions prior to 13.15.22, contains an issue related to incomplete filtering of special elements within the `isLength()` function. Specifically, the function does not properly account for Unicode variation selectors (e.g., uFE0F, uFE0E) when calculating string length. This can result in the function accepting strings that are longer than expected, potentially leading to data truncation, buffer overflows, or denial-of-service conditions. The issue stems from improper string length calculation. **Recommendations** Update to validator version 13.15.22 or later.