Moment.js < 2.11.2 Regular Expression Denial of Service

According to its self-reported version number, Moment.js is prior to 2.11.2. Therefore, it may be affected by a regular expression denial of service vulnerability when arbitrary user input is passed into moment.duration. Note that the scanner has not tested for these issues but has instead relied...