Moment vulnerabilities
We track 3 vulnerabilities in Moment products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 4, 2023.
Latest Moment vulnerabilities
- 7.5 High severity
luxon: Inefficient Regular Expression Complexity
Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch prior to 2.5.2, and the 3.x branch on 3.2.1, Luxon's `DateTime.fromRFC2822() has quadratic (N^2) complexity on some specific inputs. This cause
- 7.5 High severity
moment: Inefficient Regular Expression Complexity
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 pars
- 7.5 High severity
moment: Improper Limitation of a Pathname to a Restricted Directory
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directl