HIGH7.5
GHSA-jxwx-85vp-gvwm
Regular Expression Denial of Service in jquery-validation
Quick fix
GHSA-jxwx-85vp-gvwm — jquery-validation: upgrade to the fixed version with the command below.
npm install jquery-validation@1.19.3Details
The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation.
The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service)
This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen).
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/jQuery.Validation
Introduced in:
0Fixed in: 1.19.3Fix
dotnet add package jQuery.Validation --version 1.19.3References
- https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2021-21252[ADVISORY]
- https://github.com/jquery-validation/jquery-validation/pull/2371[WEB]
- https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d[WEB]
- https://github.com/jquery-validation/jquery-validation[PACKAGE]
- https://jqueryvalidation.org/#installation-via-package-managers[WEB]
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html[WEB]
- https://security.netapp.com/advisory/ntap-20210219-0005[WEB]
- https://securitylab.github.com/advisories/GHSL-2020-294-redos-jquery-validation[ADVISORY]
- https://www.npmjs.com/package/jquery-validation[WEB]
- https://www.nuget.org/packages/jquery.validation[WEB]