Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
Remediation
References
https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/
Related Vulnerabilities
CVE-2020-8125 Vulnerability in maven package org.webjars.npm:klona
CVE-2011-4969 Vulnerability in maven package org.webjars.bower:jquery
CVE-2018-3745 Vulnerability in npm package atob
CVE-2022-34169 Vulnerability in maven package xalan:xalan
CVE-2022-31160 Vulnerability in maven package org.webjars:jquery-ui