GHSA-jxwx-85vp-gvwm

    Dashboard / Vulnerabilities / GHSA-jxwx-85vp-gvwm

    GHSA-jxwx-85vp-gvwm

    Published: 13 Jan 2021Last Modified: 8 Jul 2026

    Summary: Regular Expression Denial of Service in jquery-validation

    Details: The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation. The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service) This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen).

    References: https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm, https://nvd.nist.gov/vuln/detail/CVE-2021-21252, https://github.com/jquery-validation/jquery-validation/pull/2371, https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d, https://github.com/jquery-validation/jquery-validation, https://jqueryvalidation.org/#installation-via-package-managers, https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html, https://security.netapp.com/advisory/ntap-20210219-0005, https://securitylab.github.com/advisories/GHSL-2020-294-redos-jquery-validation, https://www.npmjs.com/package/jquery-validation, https://www.nuget.org/packages/jquery.validation

    Affected packages

    Package

    Name: jquery-validation

    Purl: pkg:npm/jquery-validation

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -1.19.3

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-jxwx-85vp-gvwm | CVE-DB