Description
The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation.
The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service)
This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen).
Recommendation
Update the jquery-validation package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.19.3
- Patched version(s): 1.19.3
References
Could your website be exposed too?
SmartScanner can check your website for Regular Expression Denial of Service in jquery-validation and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular expression denial of service in jquery-validation - jquery-validation - CVE-2021-43306
- jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method - CVE-2022-31147
- Regular Expression Denial of Service in jsoneditor - CVE-2021-3822
- Regular Expression Denial of Service (REDoS) in Marked - CVE-2021-21306


