{"action":"Upgrade date-and-time to 0.14.2 or later.","affected":[{"fixed":"0.14.2","introduced":"0"}],"component":"date-and-time","cve_ids":["CVE-2020-26289"],"ecosystem":"npm","epss":0.02172,"exploited":false,"fixed_versions":["0.14.2"],"ghsa_id":"GHSA-r92x-f52r-x54g","id":"tcs_01M5KG8HCPFNCETZ2SAEHM0E2E","modified_at":"2026-07-08T06:00:24.586166304Z","published_at":"2020-12-24T20:49:02Z","references":["https://osv.dev/vulnerability/GHSA-r92x-f52r-x54g","https://github.com/knowledgecode/date-and-time/security/advisories/GHSA-r92x-f52r-x54g","https://nvd.nist.gov/vuln/detail/CVE-2020-26289","https://github.com/knowledgecode/date-and-time/commit/9e4b501eacddccc8b1f559fb414f48472ee17c2a","https://www.npmjs.com/advisories/1592","https://www.npmjs.com/package/date-and-time"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r92x-f52r-x54g","url":"https://osv.dev/vulnerability/GHSA-r92x-f52r-x54g"}],"summary":"regular expression denial of service (ReDoS)"}