Known Vulnerabilities for products from Momentjs

Listed below are 5 of the newest known vulnerabilities associated with the vendor "Momentjs".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2023-22467 json Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch prior to... 7.5 - HIGH 2023-01-04 2023-01-17
CVE-2022-31129 json moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment ... 7.5 - HIGH 2022-07-06 2023-11-07
CVE-2022-24785 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-04-04 2023-11-07
CVE-2017-18214 json The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a d... 7.5 - HIGH 2018-03-04 2022-02-14
CVE-2016-4055 json The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (C... 6.5 - MEDIUM 2017-01-23 2023-11-07

Known software with vulnerabilities from Momentjs

Type Vendor Product Version
ApplicationMomentjsMoment0.3.0