Debian/node-moment: medium 6.5
The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Serv
Action: Upgrade node-moment to 2.13.0+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.13.0+ds-1 | - |
Fixed versions
| 2.13.0+ds-1 |
Sources
published · modified · JSON