CVE-2022-31129 with moment.js

damianszczepanik / cucumber-reporting

HTML reports for Cucumber

GNU Lesser General Public License v2.1

546 stars 402 forks source link

CVE-2022-31129 with moment.js #1077

Closed rohsin47 closed 2 years ago

rohsin47 commented 2 years ago

Hi,

Could we please update the moment.js to latest version 2.29.4 as 2.29.3 version is showing as CVE with score of 7.5 on NVD? This is thus failing owasp checks.

https://nvd.nist.gov/vuln/detail/CVE-2022-31129

On additional note, i would like to contribute and help also? Let me know if you need a hand.

Thanks Rohit