CVE-2025-12758 — Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode — CVE Database · The Intelligence Room