topcoder-platform / work-manager

This is the frontend application for creating and managing challenges.
13 stars 48 forks source link

Outdated moment.js dependency #1571

Closed jmgasper closed 1 year ago

jmgasper commented 1 year ago

REF: PROD-4375

Description

It was observed that the application is using vulnerable version of moment js (2.24.0) which is vulnerable to attacks like parsing, validating, manipulating, and formatting dates. URL: Work Manager - Topcoder

Impact:

An attacker could use this vulnerable component to execute further attacks.

suppermancool commented 1 year ago

@jmgasper done in work-manager-issue-1571.patch