High, CVSS 7.5NuGetAmendedPublished
Regular Expression Denial of Service in jquery-validation
CVE-2021-21252 · GHSA-jxwx-85vp-gvwm
- Affected
- NuGet jquery.validation < 1.19.3
- Fixed in
- 1.19.3· Vendor fix available
- Issue
- The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation. The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service) This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen).
Recommended action: Upgrade to 1.19.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.