Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
Remediation
References
https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/
Related Vulnerabilities
CVE-2020-28460 Vulnerability in npm package multi-ini
CVE-2019-10786 Vulnerability in npm package network-manager
CVE-2021-38384 Vulnerability in npm package serverless-offline
CVE-2022-36892 Vulnerability in maven package org.jenkins-ci.plugins:rhnpush-plugin
CVE-2021-42567 Vulnerability in maven package org.apereo.cas:cas-server-core-services