Skip to content

Vulnerability introduced through moment@2.29.3  #329

@petruki

Description

@petruki

Describe the patch
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the preprocessRFC2822() function in from-string.js, when processing a very long crafted string (over 10k characters).

Current dependency

  • Name: moment
  • Version: 2.29.3

Optional - Remediation

  • Name: moment
  • Version: 2.29.4

Additional context
Links or documentation to the vulnerability or dependency update.

Metadata

Metadata

Assignees

Labels

patchUpdating dependenciessecurityVulnerability detected

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions