CVE-2022-31147
1 advisory.
npm/jquery-validation CVE-2022-31147: high 7.5, EPSS 2.24%
jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method
Action: Upgrade jquery-validation to 1.19.5 or later.
npm i jquery-validation@1.19.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.19.5 | - |
Fixed versions
| 1.19.5 |
Sources
- osv: GHSA-ffmh-x56j-9rc3
- https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-ffmh-x56j-9rc3
- https://nvd.nist.gov/vuln/detail/CVE-2022-31147
- https://github.com/jquery-validation/jquery-validation/commit/5bbd80d27fc6b607d2f7f106c89522051a9fb0dd
- https://github.com/jquery-validation/jquery-validation
- https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.5
CVE-2022-31147 · published · modified · JSON