Moment.js Moment 0.5.2 for Node.js

CPE Details

Moment.js Moment 0.5.2 for Node.js
momentjs
moment
0.5.2
2019-06-11
16h49 +00:00
2022-06-03
15h33 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:momentjs:moment:0.5.2:*:*:*:*:node.js:*:*

Informations

Vendor

momentjs

Product

moment

Version

0.5.2

Target Software

node.js

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2017-18214 2018-03-04 20h00 +00:00 The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
7.5
High
CVE-2016-4055 2017-01-23 20h00 +00:00 The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."
6.5
Medium