Skip to content

ReDoS vulnerability in url2

Moderate
staabm published GHSA-ffmh-x56j-9rc3 Jul 1, 2022

Package

npm jquery-validation (npm)

Affected versions

1.19.4

Patched versions

1.19.5

Description

Summary

Incomplete fix of CVE-2021-43306: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method.

Severity

Moderate

CVE ID

CVE-2022-31147

Weaknesses

No CWEs

Credits