Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2020/09/04 4:55 p.m.20 views

Outdated Static Dependency in vue-moment

Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation Upgrade t...

5AI score
Exploits0References5Affected Software1
OSV
OSV
added 2020/09/04 4:55 p.m.16 views

GHSA-HRPP-F84W-XHFG Outdated Static Dependency in vue-moment

Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation Upgrade t...

5.3CVSS7AI score
Exploits0References5
Node.js
Node.js
added 2019/12/06 8:7 p.m.15 views

Outdated Static Dependency

Overview Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/09/23 6:43 p.m.15 views

Outdated Static Dependency

Overview Versions of ses prior to 0.6.3 contain an Outdated Static Dependency. The package relies on realms-shim and has it loaded statically instead of as a dependency that can be updated. The version of realms-shim it has contains multiple critical Sandbox Breakout vulnerabilities. Recommendati...

6.9AI score
Exploits0Affected Software1
Rows per page
Query Builder