Fabrice Fontaine
b0f825f448
package/jquery-validation: security bump to version 1.19.5
...
- Fix CVE-2021-43306: An exponential ReDoS (Regular Expression Denial
of Service) can be triggered in the jquery-validation npm package,
when an attacker is able to supply arbitrary input to the url2 method
- Fix CVE-2022-31147: The jQuery Validation Plugin (jquery-validation)
provides drop-in validation for forms. Versions of jquery-validation
prior to 1.19.5 are vulnerable to regular expression denial of service
(ReDoS) when an attacker is able to supply arbitrary input to the url2
method. This is due to an incomplete fix for CVE-2021-43306. Users
should upgrade to version 1.19.5 to receive a patch.
- Use LICENSE.md instead of README.md which is available since version
1.14.0 and
https://github.com/jquery-validation/jquery-validation/commit/96b7036eb45375eb4861082d8ca442d94a9c666c
https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.4
https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.5
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be >
2022-07-24 10:58:26 +02:00
Fabrice Fontaine
ae79f0f403
package/jquery-validation: security bump to version 1.19.3
...
Fix CVE-2021-21252: The jQuery Validation Plugin provides drop-in
validation for your existing forms. It is published as an npm package
"jquery-validation". jquery-validation before version 1.19.3 contains
one or more regular expressions that are vulnerable to ReDoS (Regular
Expression Denial of Service).
Update hash of README.md due to changes not related to license
https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.3
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2021-05-16 13:47:45 +02:00
Heiko Thiery
8a3a5a27c1
package/j*: add license file hashes
...
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-02-03 14:44:53 +01:00
Bernd Kuhls
302711df68
package/jquery-validation: bump version to 1.14.0, added hash
...
This patch also fixes the broken download of the previous version.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2016-02-07 16:15:57 +01:00
Fabrice Fontaine