Moderate severity vulnerability that affects moment

GHSA-hxf5-mg84-pj4m

Published Jul 31, 2018 · Modified Jun 17, 2020

Description

Withdrawn, accidental duplicate publish.

The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-4055
ADVISORY https://github.com/advisories/GHSA-hxf5-mg84-pj4m

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes