{"action":"Upgrade moment to 2.19.3 or later.","affected":[{"fixed":"2.19.3","introduced":"0"}],"component":"moment","cve_ids":["CVE-2017-18214"],"ecosystem":"npm","epss":0.03649,"exploited":false,"fixed_versions":["2.19.3"],"ghsa_id":"GHSA-446m-mv8f-q348","id":"tcs_01M5KEZ3SPSQ8B83E99TA7FYJK","modified_at":"2023-11-08T03:59:15.374363Z","published_at":"2018-03-05T18:35:09Z","references":["https://osv.dev/vulnerability/GHSA-446m-mv8f-q348","https://nvd.nist.gov/vuln/detail/CVE-2017-18214","https://github.com/moment/moment/issues/4163","https://github.com/moment/moment/pull/4326","https://github.com/moment/moment/commit/69ed9d44957fa6ab12b73d2ae29d286a857b80eb","https://github.com/advisories/GHSA-446m-mv8f-q348","https://github.com/moment/moment","https://www.npmjs.com/advisories/532","https://www.tenable.com/security/tns-2019-02"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-446m-mv8f-q348","url":"https://osv.dev/vulnerability/GHSA-446m-mv8f-q348"}],"summary":"Regular Expression Denial of Service in moment"}