jQuery Validation 1.19 Release Notes

Notes

• This release implements a new package naming scheme for the NES for jQuery Validation packages. More information about the change can be found in the NES Decoupled Namespace Specification.
• This release contains no functional changes from the v1.19.4
• Full Version: @neverendingsupport/jquery-validation@1.19.2-jquery-validation-1.19.5

Notes

• This release contains a cherry-picked commit from OSS jQuery Validation v1.20.0
• Full Version: @neverendingsupport/jquery-validation@1.19.2-jquery-validation-1.19.4

Bug Fixes

• Fixed XSS vulnerability in showLabel method by adding escapeHtml option
  • This fixes a Medium Severity vulnerability (CVE-2025-3573)

Notes

• This release is from OSS jQuery Validation v1.19.2 with cherry-picked fixes from multiple later releases to incorporate CVE fixes
• Full Version: @neverendingsupport/jquery-validation@1.19.2-jquery-validation-1.19.3

Bug Fixes

• Fixed ReDoS vulnerability in url, and url2 validation
  • This fixes a High Severity vulnerability (CVE-2022-31147)
• Fixed ReDoS vulnerability in url2 validation
  • This fixes a High Severity vulnerability (CVE-2021-43306)
• Fixed Regular Expression Denial of Service vulnerability
  • This fixes a High Severity vulnerability (CVE-2021-21252)