WS-2019-0351

Outdated Static Dependency found in vue-moment before 4.1.0. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability...

@conga/framework-dashboard (>=2.0.0, <=2.1.0), @dsbn/vue-auth (0.0.1) +28 more potentially affected by unknown CVE via vue-moment (>=1.0.8, <=4.0.0)

vue-moment NPM version =1.0.8, =2.0.0, =1.0.3, =1.0.0, =1.0.40, =1.0.1, =0.0.1, =0.0.1, =6.1.0, =0.3.3, =0.1.2, =1.0.0, =1.0.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0351...

Outdated Static Dependency in vue-moment

Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation Upgrade t...

@knonginda/base (>=1.0.3, <=1.0.27), cneport-core-frontend (>=1.0.40, <=1.0.64) +3 more potentially affected by unknown CVE via vue-moment (4.0.0)

vue-moment NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vue-moment and may be impacted: - @knonginda/base =1.0.3, =1.0.40, =1.0.1, =1.0.48, =1.0.9, =1.2.37 Source cves: unknown CVE Source advisory: OSV:GHSA-HRPP-F84W-XHFG...

@knonginda/base (>=1.0.3, <=1.0.27), cneport-core-frontend (>=1.0.40, <=1.0.64) +3 more potentially affected by unknown CVE via vue-moment (4.0.0)

vue-moment NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vue-moment and may be impacted: - @knonginda/base =1.0.3, =1.0.40, =1.0.1, =1.0.48, =1.0.9, =1.2.37 Source cves: unknown CVE Source advisory: GHSA-HRPP-F84W-XHFG...

GHSA-HRPP-F84W-XHFG Outdated Static Dependency in vue-moment

Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation Upgrade t...

PT-2020-21347

Name of the Vulnerable Software and Affected Versions vue-moment versions prior to 4.1.0 Description The issue concerns an Outdated Static Dependency in vue-moment, where it depends on moment and has it loaded statically instead of as a dependency that can be updated. Specifically, it has...

Regular Expression Denial Of Service (ReDoS)

vue-moment is vulnerable to regular expression denial of service ReDoS attacks. These attacks are possible because it has a vulnerable static dependency which uses a flawed regular expression taking long time in matching dates for long strings...

Outdated Static Dependency

Overview Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation...