{"id":"CVE-2021-21252","aliases":["GHSA-jxwx-85vp-gvwm"],"url":"https://o3.security/vulnerability/CVE-2021-21252","summary":"Regular Expression Denial of Service in jquery-validation","details":"The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package \"jquery-validation\". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.","published":"2021-01-13T19:15:17.183Z","modified":"2026-07-09T15:01:21.894610Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"jquery-validation","fixedVersion":"1.19.3"},{"ecosystem":"NuGet","name":"jQuery.Validation","fixedVersion":"1.19.3"}],"fix":{"url":"https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d","label":"jquery-validation/jquery-validation@5d8f29e"},"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html"},{"type":"ADVISORY","url":"https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210219-0005/"},{"type":"ADVISORY","url":"https://www.npmjs.com/package/jquery-validation"},{"type":"FIX","url":"https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d"},{"type":"FIX","url":"https://github.com/jquery-validation/jquery-validation/pull/2371"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T15:01:21.894610Z"}}