Read the docs

moment

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

moment records in CISA KEV

No moment vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Moment 4 records HIGH Luxon 1 record LOW

Records

4 records in Moment · all components

TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g

Inefficient Regular Expression Complexity in moment

Priority HIGH 72

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05551 Published 2022-07-06 Partial fix · 2.29.4 CWE-400
TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4

Path Traversal in Moment.js

Priority MEDIUM 54

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.1384 Published 2022-04-04 Partial fix · 2.29.2 CWE-22
TI-2016-03445 CVE-2016-4055 · GHSA-87vv-r9j6-g5qv

The duration function in the moment package before 2.11.2 for Node.js allows remote…

Priority MEDIUM 41

The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.09905 Published 2017-01-23 Partial fix · 2.11.2 CWE-400
Open these records in search →