{"action":"Upgrade moment to 2.29.4 or later.","affected":[{"fixed":"2.29.4","introduced":"2.18.0"}],"component":"moment","cve_ids":["CVE-2022-31129"],"ecosystem":"npm","epss":0.05551,"exploited":false,"fixed_versions":["2.29.4"],"ghsa_id":"GHSA-wc69-rhjr-hc9g","id":"tcs_01M5KGEQ14ATQPDH009P3BECMV","modified_at":"2026-09-10T03:49:45.131249858Z","published_at":"2022-07-06T18:38:49Z","references":["https://osv.dev/vulnerability/GHSA-wc69-rhjr-hc9g","https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","https://nvd.nist.gov/vuln/detail/CVE-2022-31129","https://github.com/moment/moment/pull/6015#issuecomment-1152961973","https://github.com/moment/moment/pull/6015/commits/4bbb9f3ccbe231de40207503f344fe5ce97584f4","https://github.com/moment/moment/pull/6015/commits/bfd4f2375d5c1a2106246721d693a9611dddfbfe","https://github.com/moment/moment/pull/6015/commits/dc0d180e90d8a84f7ff13572363330a22b3ea504","https://github.com/moment/moment/commit/9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3","https://security.netapp.com/advisory/ntap-20241108-0002","https://security.netapp.com/advisory/ntap-20221014-0003","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q","https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html","https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633","https://github.com/moment/moment"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wc69-rhjr-hc9g","url":"https://osv.dev/vulnerability/GHSA-wc69-rhjr-hc9g"}],"summary":"Moment.js vulnerable to Inefficient Regular Expression Complexity"}