CVE-2023-22467
Published Jan 4, 2023Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch prior to 2.5.2, and the 3.x branch on 3.2.1, Luxon's `DateTime…
Vendor archive
momentjs CVEs
Beta · best-effort5 CVEs tagged to vendor momentjs — 0 Critical, 4 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2022-31129
Published Jul 6, 2022moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Sp…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2022-24785
Published Apr 4, 2022Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2017-18214
Published Mar 4, 2018The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
CVE-2016-4055
Published Jan 23, 2017The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expr…
Showing 1-5 of 5 CVEsPage 1 of 1