Outdated Static Dependency in vue-moment

Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation Upgrade t...

GHSA-HRPP-F84W-XHFG Outdated Static Dependency in vue-moment

Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation Upgrade t...

@knonginda/base (>=1.0.3, <=1.0.27), cneport-core-frontend (>=1.0.40, <=1.0.58) +3 more potentially affected by unknown CVE via vue-moment (4.0.0)

vue-moment NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vue-moment and may be impacted: - @knonginda/base =1.0.3, =1.0.40, =1.0.1, =1.0.48, =1.0.9, =1.2.37 Source cves: unknown CVE Source advisory: OSV:GHSA-HRPP-F84W-XHFG...

Regular Expression Denial Of Service (ReDoS)

vue-moment is vulnerable to regular expression denial of service ReDoS attacks. These attacks are possible because it has a vulnerable static dependency which uses a flawed regular expression taking long time in matching dates for long strings...

Outdated Static Dependency

Overview Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation...