This repository has been archived by the owner on Jun 6, 2019. It is now read-only.
CVE-2017-18214 (High) detected in moment-2.18.1.tgz #33
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2017-18214 - High Severity Vulnerability
Parse, validate, manipulate, and display dates
Library home page: https://registry.npmjs.org/moment/-/moment-2.18.1.tgz
Path to dependency file: /probot-issue-versioning/package.json
Path to vulnerable library: /tmp/git/probot-issue-versioning/node_modules/moment/package.json
Dependency Hierarchy:
Found in HEAD commit: 401f73579c289637e10b6a10cb44727b52b03e1b
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
Publish Date: 2018-03-04
URL: CVE-2017-18214
Base Score Metrics:
Type: Upgrade version
Origin: https://nodesecurity.io/advisories/532
Release Date: 2017-11-27
Fix Resolution: Update to version 2.19.3
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: