The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.
{
"binaries": [
{
"binary_name": "civicrm-common",
"binary_version": "4.7.1+dfsg-2ubuntu1"
},
{
"binary_name": "civicrm-l10n",
"binary_version": "4.7.1+dfsg-2ubuntu1"
},
{
"binary_name": "drupal7-mod-civicrm",
"binary_version": "4.7.1+dfsg-2ubuntu1"
},
{
"binary_name": "wordpress-civicrm",
"binary_version": "4.7.1+dfsg-2ubuntu1"
}
]
}