Lucene search
+L

1 matches found

OSV
OSV
added 2022/07/06 6:38 p.m.18 views

GHSA-WC69-RHJR-HC9G Moment.js vulnerable to Inefficient Regular Expression Complexity

Impact using string-to-date parsing in moment more specifically rfc2822 parsing, which is tried by default has quadratic N^2 complexity on specific inputs noticeable slowdown is observed with inputs above 10k characters users who pass user-provided strings without sanity length checks to moment...

7.5CVSS6.8AI score0.04923EPSS
SaveExploits1References20
Rows per page
Query Builder