Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-dgq1-519m-6ubb
Summary
jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method
Summary

Incomplete fix of CVE-2021-43306: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method.
Aliases
0
alias CVE-2022-31147
1
alias GHSA-ffmh-x56j-9rc3
2
alias GMS-2022-2867
Fixed_packages
0
url pkg:deb/debian/node-jquery-validation@0?distro=sid
purl pkg:deb/debian/node-jquery-validation@0?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-jquery-validation@0%3Fdistro=sid
1
url pkg:deb/debian/node-jquery-validation@1.21.0%2Bdfsg-4?distro=sid
purl pkg:deb/debian/node-jquery-validation@1.21.0%2Bdfsg-4?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-jquery-validation@1.21.0%252Bdfsg-4%3Fdistro=sid
2
url pkg:npm/jquery-validation@1.19.5
purl pkg:npm/jquery-validation@1.19.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.5
Affected_packages
0
url pkg:npm/jquery-validation@1.13.1
purl pkg:npm/jquery-validation@1.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.13.1
1
url pkg:npm/jquery-validation@1.14.0
purl pkg:npm/jquery-validation@1.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.14.0
2
url pkg:npm/jquery-validation@1.15.0-pre
purl pkg:npm/jquery-validation@1.15.0-pre
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.15.0-pre
3
url pkg:npm/jquery-validation@1.15.0
purl pkg:npm/jquery-validation@1.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.15.0
4
url pkg:npm/jquery-validation@1.15.1
purl pkg:npm/jquery-validation@1.15.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.15.1
5
url pkg:npm/jquery-validation@1.16.0
purl pkg:npm/jquery-validation@1.16.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.16.0
6
url pkg:npm/jquery-validation@1.17.0
purl pkg:npm/jquery-validation@1.17.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.17.0
7
url pkg:npm/jquery-validation@1.18.0
purl pkg:npm/jquery-validation@1.18.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.18.0
8
url pkg:npm/jquery-validation@1.19.0
purl pkg:npm/jquery-validation@1.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.0
9
url pkg:npm/jquery-validation@1.19.1
purl pkg:npm/jquery-validation@1.19.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.1
10
url pkg:npm/jquery-validation@1.19.2
purl pkg:npm/jquery-validation@1.19.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a286-32jj-eubk
1
vulnerability VCID-apr7-9vue-3uhr
2
vulnerability VCID-dgq1-519m-6ubb
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.2
11
url pkg:npm/jquery-validation@1.19.3
purl pkg:npm/jquery-validation@1.19.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-apr7-9vue-3uhr
1
vulnerability VCID-dgq1-519m-6ubb
2
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.3
12
url pkg:npm/jquery-validation@1.19.4-pre
purl pkg:npm/jquery-validation@1.19.4-pre
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-apr7-9vue-3uhr
1
vulnerability VCID-dgq1-519m-6ubb
2
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.4-pre
13
url pkg:npm/jquery-validation@1.19.4
purl pkg:npm/jquery-validation@1.19.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dgq1-519m-6ubb
1
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.4
14
url pkg:npm/jquery-validation@1.19.5-pre
purl pkg:npm/jquery-validation@1.19.5-pre
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dgq1-519m-6ubb
1
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.5-pre
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31147
reference_id
reference_type
scores
0
value 0.00323
scoring_system epss
scoring_elements 0.55365
published_at 2026-04-21T12:55:00Z
1
value 0.00323
scoring_system epss
scoring_elements 0.55319
published_at 2026-04-02T12:55:00Z
2
value 0.00323
scoring_system epss
scoring_elements 0.55343
published_at 2026-04-04T12:55:00Z
3
value 0.00323
scoring_system epss
scoring_elements 0.55325
published_at 2026-04-07T12:55:00Z
4
value 0.00323
scoring_system epss
scoring_elements 0.55375
published_at 2026-04-08T12:55:00Z
5
value 0.00323
scoring_system epss
scoring_elements 0.55376
published_at 2026-04-09T12:55:00Z
6
value 0.00323
scoring_system epss
scoring_elements 0.55386
published_at 2026-04-18T12:55:00Z
7
value 0.00323
scoring_system epss
scoring_elements 0.55364
published_at 2026-04-12T12:55:00Z
8
value 0.00323
scoring_system epss
scoring_elements 0.55346
published_at 2026-04-13T12:55:00Z
9
value 0.00323
scoring_system epss
scoring_elements 0.55382
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31147
1
reference_url https://github.com/jquery-validation/jquery-validation
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/jquery-validation/jquery-validation
2
reference_url https://github.com/jquery-validation/jquery-validation/commit/5bbd80d27fc6b607d2f7f106c89522051a9fb0dd
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:53:30Z/
url https://github.com/jquery-validation/jquery-validation/commit/5bbd80d27fc6b607d2f7f106c89522051a9fb0dd
3
reference_url https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:53:30Z/
url https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.5
4
reference_url https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-ffmh-x56j-9rc3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:53:30Z/
url https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-ffmh-x56j-9rc3
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31147
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31147
6
reference_url https://github.com/advisories/GHSA-ffmh-x56j-9rc3
reference_id GHSA-ffmh-x56j-9rc3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ffmh-x56j-9rc3
Weaknesses
0
cwe_id 1333
name Inefficient Regular Expression Complexity
description The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-dgq1-519m-6ubb