Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/07/06 6:38 p.m.282 views

Moment.js vulnerable to Inefficient Regular Expression Complexity

Impact using string-to-date parsing in moment more specifically rfc2822 parsing, which is tried by default has quadratic N^2 complexity on specific inputs noticeable slowdown is observed with inputs above 10k characters users who pass user-provided strings without sanity length checks to moment...

7.5CVSS7.6AI score0.04923EPSS
SaveExploits1References20Affected Software2
Rows per page
Query Builder