Debian/node-moment: medium 6.5
The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Serv
Action: Upgrade node-moment to 2.13.0+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.13.0+ds-1 | - |
Fixed versions
| 2.13.0+ds-1 |
Sources
- osv: DEBIAN-CVE-2016-4055#Debian:14/node-moment
- https://security-tracker.debian.org/tracker/CVE-2016-4055
published · modified · JSON