Bug: Security: "moment" package < 2.19.3 causing a security vulnerability

18F / dol-whd-14c

The 14(c) system will become a modern, digital-first service. Applicants will be provided an intuitive online experience, guiding them through the information needed to complete their application correctly.

Other

16 stars 17 forks source link

Bug: Security: "moment" package < 2.19.3 causing a security vulnerability #666

Open mmurthydol opened 6 years ago

mmurthydol commented 6 years ago

The moment dependency defined in package-lock.json has a known moderate severity security vulnerability in version range < 2.19.3 and should be updated.

https://github.com/18F/dol-whd-14c/network/dependencies

[ ] update package-lock.json with "moment" >= 2.19.3 and ensure application still works (look for regular expression validation in the app like EIN).

EStriegel commented 6 years ago

Moved to Icebox 9/6.