Regular expression denial of service in jquery-validation
Low severity
GitHub Reviewed
Published
Jun 3, 2022
to the GitHub Advisory Database
•
Updated Nov 12, 2024
Description
Published by the National Vulnerability Database
Jun 2, 2022
Published to the GitHub Advisory Database
Jun 3, 2022
Reviewed
Jun 3, 2022
Last updated
Nov 12, 2024
Credits
-
klaudialax Analyst
-
amita-seal Analyst
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
References