TI-2022-13190 CVE-2022-31147 · GHSA-ffmh-x56j-9rc3
jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306
Priority MEDIUM 43
The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms.
jquery-validation
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
jquery-validation records in CISA KEVNo jquery-validation vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2021-04355 CVE-2021-21252 · GHSA-jxwx-85vp-gvwm
Regular expression denial of service in jquery-validation
Priority LOW 39
The jQuery Validation Plugin provides drop-in validation for your existing forms.
TI-2021-19299 CVE-2021-43306 · GHSA-j9m2-h2pv-wvph
Exponential ReDoS in jquery-validation
Priority LOW 36
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method