Vulnerability Database
296,746
Total vulnerabilities in the database
Moderate severity vulnerability that affects moment
Withdrawn, accidental duplicate publish.
The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."
| Software | From | Fixed in |
|---|---|---|
moment
|
- | 2.11.2 |
No references available.
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime