@allsource/ui.partials.navbar.navbar (>=0.0.15, <=0.0.53), @allsource/ui.partials.navbar.usericons (>=0.0.1, <=0.0.30) +223 more potentially affected by CVE-2023-22467 via luxon (>=3.0.0, <=3.2.0)

🗓️ 09 Jan 2023 14:10:49Reported by Vulners OSVType

Luxon versions 3.0.0 to 3.2.0 contain CVE-2023-22467, a prototype pollution vulnerability affecting 225+ dependent NPM packages.

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: A vulnerability in Luxon may affect IBM Robotic Process Automation and result in a denial of service (CVE-2023-22467)	23 Mar 202321:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to denial of service due to Moment CVE-2023-22467	20 Mar 202318:15	–	ibm
IBM Security Bulletins	Security Bulletin: Moment.js issue of validating, manipulating, and formatting dates	13 Aug 202406:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container flows that use scheduled event nodes may be vulnerable to denial of service due to [CVE-2023-22467]	2 Feb 202320:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities	21 Oct 202415:51	–	ibm
Circl	CVE-2023-22467	5 Jan 202300:18	–	circl
CNNVD	Luxon 安全漏洞	4 Jan 202300:00	–	cnnvd
CVE	CVE-2023-22467	4 Jan 202321:52	–	cve
Cvelist	CVE-2023-22467 luxon.js inefficient regular expression complexity vulnerability	4 Jan 202321:52	–	cvelist

04 Feb 2026 04:08Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.01707