Description
Affected versions of jquery use a lowercasing logic on attribute names. When given a boolean attribute with a name that contains uppercase characters, jquery enters into an infinite recursion loop, exceeding the call stack limit, and resulting in a denial of service condition.
Recommendation
Update the jquery package to the latest compatible version. Followings are version details:
- Affected version(s): = 3.0.0-rc.1
- Patched version(s): 3.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Denial of Service in jquery and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular expression denial of service in jquery-validation - jquery-validation - CVE-2021-43306
- Regular Expression Denial of Service in hawk - CVE-2016-2515
- Regular Expression Denial of Service in jquery-validation - CVE-2021-21252
- Denial of Service and Content Injection in i18n-node-angular - CVE-2016-10524
You might also like:
See something that needs correcting? Let us knowUpdated September 02, 2025