CVE-2021-43306: Jqueryvalidation jQuery Validation

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

Affected products

• Jqueryvalidation jQuery Validation: before 1.19.4 (fixed in 1.19.4)

Published 2022-06-02. Last modified 2026-06-17.