Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp4d3gtODV2cC1ndndt

Regular Expression Denial of Service in jquery-validation

The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation.

The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service)

This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen).

Permalink: https://github.com/advisories/GHSA-jxwx-85vp-gvwm
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp4d3gtODV2cC1ndndt
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 3 years ago
Updated: 8 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-jxwx-85vp-gvwm, CVE-2021-21252
References:

• https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm
• https://github.com/jquery-validation/jquery-validation/pull/2371
• https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d
• https://www.npmjs.com/package/jquery-validation
• https://nvd.nist.gov/vuln/detail/CVE-2021-21252
• https://security.netapp.com/advisory/ntap-20210219-0005/
• https://jqueryvalidation.org/#installation-via-package-managers
• https://securitylab.github.com/advisories/GHSL-2020-294-redos-jquery-validation/
• https://www.nuget.org/packages/jquery.validation
• https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
• https://github.com/advisories/GHSA-jxwx-85vp-gvwm

Repository: https://github.com/jquery-validation/jquery-validation
Blast Radius: 32.8

Affected Packages