GMS-2016-33: Exceeding Stack Call Limit DoS

May 29, 2016

A lowercasing logic is used on the attribute names. Because of this, boolean attributes whose names are not all lowercase cause infinite recursion, and will exceed the stack call limit.

References

github.com/jquery/jquery/issues/3133

Code Behaviors & Features

Detect and mitigate GMS-2016-33 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →