CVE-2021-43306 MEDIUM

CVE-2021-43306: Exponential ReDoS in jquery-validation

Vendor Jquery-Validation
Product jquery-validation
Weakness CWE-1333
Published June 1, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

Key dates

02Disclosure timeline

June 1, 2022 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-4923 path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards CVE-2026-10691 wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos CVE-2026-28356 ReDoS in multipart 1.3.0 - `parse_options_header()` CVE-2026-45409 Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix CVE-2026-22809 tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability