npm/jquery-validation CVE-2021-21252: high 7.5, EPSS 3.57%

Regular Expression Denial of Service in jquery-validation

Action: Upgrade jquery-validation to 1.19.3 or later.

npm i jquery-validation@1.19.3

Affected

Fixed versions

Sources

• osv: GHSA-jxwx-85vp-gvwm
• https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm
• https://nvd.nist.gov/vuln/detail/CVE-2021-21252
• https://github.com/jquery-validation/jquery-validation/pull/2371
• https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d
• https://github.com/jquery-validation/jquery-validation
• https://jqueryvalidation.org/#installation-via-package-managers
• https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
• https://security.netapp.com/advisory/ntap-20210219-0005
• https://securitylab.github.com/advisories/GHSL-2020-294-redos-jquery-validation
• https://www.npmjs.com/package/jquery-validation
• https://www.nuget.org/packages/jquery.validation

CVE-2021-21252 · published 2021-01-13T18:21:54Z · modified 2026-07-08T06:29:20.727643255Z · JSON