{"action":"Upgrade luxon to 1.28.1 or later.","affected":[{"fixed":"1.28.1","introduced":"1.0.0"},{"fixed":"2.5.2","introduced":"2.0.0"},{"fixed":"3.2.1","introduced":"3.0.0"}],"component":"luxon","cve_ids":["CVE-2023-22467"],"ecosystem":"npm","epss":0.01785,"exploited":false,"fixed_versions":["1.28.1","2.5.2","3.2.1"],"ghsa_id":"GHSA-3xq5-wjfh-ppjc","id":"tcs_01M5KEYPQW9E5A00EP7448PXBH","modified_at":"2026-02-04T04:08:25.579357Z","published_at":"2023-01-09T14:10:49Z","references":["https://osv.dev/vulnerability/GHSA-3xq5-wjfh-ppjc","https://github.com/moment/luxon/security/advisories/GHSA-3xq5-wjfh-ppjc","https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","https://nvd.nist.gov/vuln/detail/CVE-2023-22467","https://github.com/moment/moment/pull/6015#issuecomment-1152961973","https://github.com/moment/luxon/commit/5ab3bf64a10da929a437629cdb2f059bb83212bf","https://github.com/moment/luxon","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/44I3WAJKYXDLOVYRGMHAUXMIV4SPFXDZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LIVOASKBQH7FEUI5RWM3SOHR6VK7ZZR"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3xq5-wjfh-ppjc","url":"https://osv.dev/vulnerability/GHSA-3xq5-wjfh-ppjc"}],"summary":"Luxon Inefficient Regular Expression Complexity vulnerability"}