Denial of Servicejquery
Affected versions of
jquery use a lowercasing logic on attribute names. When given a boolean attribute with a name that contains uppercase characters,
jquery enters into an infinite recursion loop, exceeding the call stack limit, and resulting in a denial of service condition.
Update to version 3.0.0 or later.
publishedAdvisory publishedApr 14th, 2017
reportedInitial report by Michał GołębiowskiMar 21st, 2017