Known vulnerabilities in Moment
Vendor:
Moment.js
Software:
Moment
Software CPE:
cpe:2.3:a:moment_project:moment:*:*:*:*:*:nodejs:*:*
Website:
https://momentjs.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
2.31.0
2.30.1
2.30.0
2.29.4
2.29.3
2.29.2
2.29.1
2.29.0
2.28.0
2.27.0
2.26.0
2.25.3
2.25.2
2.25.1
2.25.0
1.0.0
2.24.0
2.23.0
2.22.2
2.22.1
2.22.0
2.21.0
2.20.1
2.20.0
2.19.4
2.17.1
2.17.0
2.16.0
2.15.2
2.15.1
2.15.0
2.14.2
2.14.1
2.14.0
2.13.0
2.12.0
2.11.2
2.11.1
2.11.0
2.10.6
2.10.5
2.10.3
2.10.2
2.9.0
2.8.4
2.8.3
2.8.2
2.8.1
2.8.0
2.7.0
2.6.0
2.5.1
2.5.0
2.4.0
2.3.1
2.3.0
2.2.1
2.2.0
2.1.0
2.0.0
1.7.2
1.7.1
1.7.0
1.6.2
1.6.1
1.6.0
1.5.1
1.5.0
1.4.0
1.3.0
1.2.0
1.1.2
1.1.1
1.1.0
1.0.1
0.6.1
0.6.0
0.5.2
0.5.1
0.5.0
0.4.1
0.4.0
0.3.2
0.3.1
0.3.0
2.19.3
2.18.1
2.18.0
2.19.0
2.19.2
2.19.1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU150114 - Path Traversal: \'dir/../../filename\' CVE-2026-17495 |
CWE-27 | Medium | 2.31.0 | 16.09.2026 |
SB2026091607 SB2026101350 SB2026101351 |
||
| #VU65835 - Incorrect Regular Expression CVE-2022-31129 |
CWE-185 | Medium | 2.29.4 | 27.07.2022 |
SB2022072729 SB2022072901 SB2022081048 and 102 more |
||
| #VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785 |
CWE-22 | Medium | 2.29.2 | 20.04.2022 |
SB2022042016 SB2022042017 SB2022060317 and 67 more |
||
| #VU21762 - Resource Management Errors CVE-2016-4055 |
CWE-399 | Medium | 2.11.2 | 14.10.2019 |
SB2017012304 SB2023100518 SB2024050806 and 1 more |
||
| #VU11300 - Resource exhaustion CVE-2017-18214 |
CWE-400 | Low | - | 28.03.2018 |
SB2017090813 SB2022022516 SB2022101031 and 8 more |