TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g
Inefficient Regular Expression Complexity in moment
Priority HIGH 72
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
moment
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
moment records in CISA KEVNo moment vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4
Path Traversal in Moment.js
Priority MEDIUM 54
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
TI-2016-03445 CVE-2016-4055 · GHSA-87vv-r9j6-g5qv
The duration function in the moment package before 2.11.2 for Node.js allows remote…
Priority MEDIUM 41
The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."
TI-2017-13399 CVE-2017-18214 · GHSA-446m-mv8f-q348
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of…
Priority LOW 39
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
TI-2023-08716 CVE-2023-22467 · GHSA-3xq5-wjfh-ppjc
luxon.js inefficient regular expression complexity vulnerability
Priority LOW 37
Luxon is a library for working with dates and times in JavaScript.
TI-2026-14353 CVE-2026-17495 · GHSA-4p3w-j4w9-5jqw
moment vulnerable to Path Traversal via crafted non-string locale name
Priority LOW 27
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.