e.g. isPassportNumber, etc.

The fact that exclude takes dotted notation for nested fields, but unknown does not apply to nested fields, means that exclude doesn't work for nested fields in some common use cases unless the nested schema(s) have the desired Meta.unknown setting, and then they are not runtime-flexible, which is the great benefit of Schema and load taking exclude. Somewhat new to marshmallow so mayb

E.g.

check('email').isEmail().withMessage({
	message: 'Not an email',
	errorCode: ErrorCodes.NOT_EMAIL,
})

To support express-validator/express-validator#667 (comment).

With this vulnerability, an attacker can bypass any security checks enforced by class-validator.

When class-validator is used to validate user-input, the attributes in the user-input object will be transformed into the validation class instance.
However, the transforming procedure will overwrite the internal attribute of validation class instance (e.g., constructor attribute) if the attacke

type Item struct {
	Bt int `valid:"range(1|100)"`
}

func main() {
	t := Item{-1}
	ok, err := govalidator.ValidateStruct(t)
	fmt.Println(ok, err)
}

output:Bt: Validator range(1|100) doesn't support kind int;