Asymmetric denial of service - ReDoS In moment
Description
Regular Expression Denial of Service in moment
Affected versions of moment are vulnerable to a low severity regular expression denial of service when parsing dates as strings.
Recommendation
Update to version 2.19.3 or later.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 2.19.3 | ||
 debian 13 | 2.19.3+ds-1 | ||
debian 11 | 2.19.3+ds-1 | ||
debian 12 | 2.19.3+ds-1 | ||
debian 14 | 2.19.3+ds-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3. 4.