An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
https://github.com/advisories/GHSA-j9m2-h2pv-wvph
https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/