TI-2026-14353 CVE-2026-17495 · GHSA-4p3w-j4w9-5jqw
moment vulnerable to Path Traversal via crafted non-string locale name
Priority LOW 27
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
Vulnerabilities
6 records
TI-2023-08716 CVE-2023-22467 · GHSA-3xq5-wjfh-ppjc
luxon.js inefficient regular expression complexity vulnerability
Priority LOW 37
Luxon is a library for working with dates and times in JavaScript.
TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g
Inefficient Regular Expression Complexity in moment
Priority HIGH 72
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4
Path Traversal in Moment.js
Priority MEDIUM 54
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
TI-2017-13399 CVE-2017-18214 · GHSA-446m-mv8f-q348
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of…
Priority LOW 39
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
TI-2016-03445 CVE-2016-4055 · GHSA-87vv-r9j6-g5qv
The duration function in the moment package before 2.11.2 for Node.js allows remote…
Priority MEDIUM 41
The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."