The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.
{ "binaries": [ { "binary_version": "4.7.1+dfsg-2ubuntu1", "binary_name": "civicrm-common" }, { "binary_version": "4.7.1+dfsg-2ubuntu1", "binary_name": "civicrm-l10n" }, { "binary_version": "4.7.1+dfsg-2ubuntu1", "binary_name": "drupal7-mod-civicrm" }, { "binary_version": "4.7.1+dfsg-2ubuntu1", "binary_name": "wordpress-civicrm" } ] }