MO
Product
Moment
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Moment to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31129 | 7.5 | Jul 6 | moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates Affected: 2.18.0 before 2.29.4; 2.18.0 before 2.29.4 |
| CVE-2022-24785 | 7.5 | Apr 4 | Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates Affected: 1.0.1 before 2.29.2; 1.0.1 before 2.29.2 |
| CVE-2017-18214 | 7.5 | Mar 4 | The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055 Affected: through 2.19.2 |
| CVE-2016-4055 | 6.5 | Jan 23 | The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular… Affected: before 2.11.2 |
Showing 4
