npm/moment CVE-2017-18214: high 7.5, EPSS 3.65%
Regular Expression Denial of Service in moment
Action: Upgrade moment to 2.19.3 or later.
npm i moment@2.19.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.19.3 | - |
Fixed versions
| 2.19.3 |
Sources
- osv: GHSA-446m-mv8f-q348
- https://nvd.nist.gov/vuln/detail/CVE-2017-18214
- https://github.com/moment/moment/issues/4163
- https://github.com/moment/moment/pull/4326
- https://github.com/moment/moment/commit/69ed9d44957fa6ab12b73d2ae29d286a857b80eb
- https://github.com/advisories/GHSA-446m-mv8f-q348
- https://github.com/moment/moment
- https://www.npmjs.com/advisories/532
- https://www.tenable.com/security/tns-2019-02
CVE-2017-18214 · published · modified · JSON