Debian/node-moment: high 7.5
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
Action: Upgrade node-moment to 2.19.3+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.19.3+ds-1 | - |
Fixed versions
| 2.19.3+ds-1 |
Sources
- osv: DEBIAN-CVE-2017-18214#Debian:13/node-moment
- https://security-tracker.debian.org/tracker/CVE-2017-18214
published · modified · JSON