Update jsrepository.json for Momentjs CVE-2022-31129

RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

https://retirejs.github.io/retire.js/

Other

3.66k stars 414 forks source link

Update jsrepository.json for Momentjs CVE-2022-31129 #391

Closed enggfraz closed 2 years ago

enggfraz commented 2 years ago

Moment is a lightweight JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the preprocessRFC2822() function in from-string.js, when processing a very long crafted string (over 10k characters).

eoftedal commented 2 years ago

Thanks!