What is GHSA-j9m2-h2pv-wvph?

GHSA-j9m2-h2pv-wvph is a security advisory published by GitHub Security Advisories with Low severity. Regular expression denial of service in jquery-validation

Which CVE IDs does GHSA-j9m2-h2pv-wvph cover?

GHSA-j9m2-h2pv-wvph covers the following CVE IDs: CVE-2021-43306. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-j9m2-h2pv-wvph?

GHSA-j9m2-h2pv-wvph affects 1 product, including: npm/jquery-validation:\u003c 1.19.4.

GHSA-j9m2-h2pv-wvphLow

Regular expression denial of service in jquery-validation

Vendor

GitHub Security Advisories

Published

June 3, 2022

Last Modified

November 12, 2024

🔗 CVE IDs covered (1)

CVE-2021-43306 →

📋 Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

🎯 Affected products1

npm/jquery-validation:< 1.19.4

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-43306
https://github.com/jquery-validation/jquery-validation/commit/69cb17ed774b427f7e2ffcdf197968231725c30e
https://github.com/jquery-validation/jquery-validation/pull/2428
https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348
https://github.com/advisories/GHSA-j9m2-h2pv-wvph