Skip to content
OpenAdvisories

Package · npm

jquery-validation

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.1
    CVE-2025-3573

    jquery-validation vulnerable to Cross-site Scripting

    Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a u…

    phpmyadmin phpmyadmin znuny znuny Debian Ubuntu npm
  • High 7.5
    CVE-2022-31147 Public exploit

    jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306

    The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service (ReDoS) when an attacker is able to supply arbitrary input to the url2…

    jquery-validation jquery-validation civicrm jquery-validation Ubuntu npm
  • Medium 5.9
    CVE-2021-43306

    Exponential ReDoS in jquery-validation

    An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

    jquery-validation jquery-validation civicrm jquery-validation Ubuntu npm
  • Medium 5.3
    CVE-2021-21252

    Regular expression denial of service in jquery-validation

    The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Exp…

    jquery-validation jquery-validation phpmyadmin phpmyadmin Debian Ubuntu npm NuGet