TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g
Inefficient Regular Expression Complexity in moment
Priority HIGH 72
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
Vulnerabilities
4 records
TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4
Path Traversal in Moment.js
Priority MEDIUM 54
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
TI-2017-13399 CVE-2017-18214 · GHSA-446m-mv8f-q348
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of…
Priority LOW 39
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
TI-2016-03445 CVE-2016-4055 · GHSA-87vv-r9j6-g5qv
The duration function in the moment package before 2.11.2 for Node.js allows remote…
Priority MEDIUM 41
The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."