Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
Remediation
References
https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/
Related Vulnerabilities
CVE-2019-17633 Vulnerability in maven package org.eclipse.che:assembly-wsmaster-war
CVE-2021-23391 Vulnerability in npm package calipso
CVE-2022-25948 Vulnerability in npm package liquidjs
CVE-2021-26540 Vulnerability in maven package org.webjars.npm:sanitize-html
CVE-2020-28458 Vulnerability in maven package org.webjars.bower:datatables.net