GitHub Advisoryadvisory · npm

GHSA-j9m2-h2pv-wvph Regular expression denial of service in jquery-validation

LOW Published 2022-06-03 Modified 2024-11-12 Official page ↗
Aliases
CVE-2021-43306
Ecosystem
npm
Packages
jquery-validation
Severity
Low
Weaknesses
CWE-1333
Reviewed
2022-06-03

Affected packages

• npm jquery-validation: < 1.19.4 → fixed in 1.19.4

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

Related

Alias · CVE (1)

  • CVE-2021-43306 An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able… vulnerability

Weakness · CWE (1)

  • CWE-1333 Inefficient Regular Expression Complexity weakness

References