npm/moment-timezone: low
Command Injection in moment-timezone
Action: Upgrade moment-timezone to 0.5.35 or later.
npm i moment-timezone@0.5.35Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.0 | 0.5.35 | - |
Fixed versions
| 0.5.35 |
Sources
- osv: GHSA-56x4-j7p9-fcf9
- https://github.com/moment/moment-timezone/security/advisories/GHSA-56x4-j7p9-fcf9
- https://github.com/moment/moment-timezone/commit/ce955a301ff372e8e9fb3a5b516620c60e7a082a
- https://github.com/moment/moment-timezone
published · modified · JSON