Known vulnerabilities in Moment
Vendor:
Moment.js
Software:
Moment
Software CPE:
cpe:2.3:a:moment_project:moment:*:*:*:*:*:nodejs:*:*
Website:
https://momentjs.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
2.30.1
2.30.0
2.29.4
2.29.3
2.29.2
2.29.1
2.29.0
2.28.0
2.27.0
2.26.0
2.25.3
2.25.2
2.25.1
2.25.0
1.0.0
2.24.0
2.23.0
2.22.2
2.22.1
2.22.0
2.21.0
2.20.1
2.20.0
2.19.4
2.17.1
2.17.0
2.16.0
2.15.2
2.15.1
2.15.0
2.14.2
2.14.1
2.14.0
2.13.0
2.12.0
2.11.2
2.11.1
2.11.0
2.10.6
2.10.5
2.10.3
2.10.2
2.9.0
2.8.4
2.8.3
2.8.2
2.8.1
2.8.0
2.7.0
2.6.0
2.5.1
2.5.0
2.4.0
2.3.1
2.3.0
2.2.1
2.2.0
2.1.0
2.0.0
1.7.2
1.7.1
1.7.0
1.6.2
1.6.1
1.6.0
1.5.1
1.5.0
1.4.0
1.3.0
1.2.0
1.1.2
1.1.1
1.1.0
1.0.1
0.6.1
0.6.0
0.5.2
0.5.1
0.5.0
0.4.1
0.4.0
0.3.2
0.3.1
0.3.0
2.19.3
2.18.1
2.18.0
2.19.0
2.19.2
2.19.1
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65835 - Incorrect Regular Expression CVE-2022-31129 |
CWE-185 | Medium | 2.29.4 | 27.07.2022 |
SB2022072729 SB2022072901 SB2022081048 and 102 more |
||
| #VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785 |
CWE-22 | Medium | 2.29.2 | 20.04.2022 |
SB2022042016 SB2022042017 SB2022060317 and 65 more |
||
| #VU21762 - Resource Management Errors CVE-2016-4055 |
CWE-399 | Medium | 2.11.2 | 14.10.2019 |
SB2017012304 SB2023100518 SB2024050806 and 1 more |
||
| #VU11300 - Resource exhaustion CVE-2017-18214 |
CWE-400 | Low | - | 28.03.2018 |
SB2017090813 SB2022022516 SB2022101031 and 8 more |