Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fg81-yqah-rbep
Summary
Moderate severity vulnerability that affects moment
Withdrawn, accidental duplicate publish.

The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."
Aliases
0
alias GHSA-hxf5-mg84-pj4m
Fixed_packages
0
url pkg:npm/moment@2.11.2
purl pkg:npm/moment@2.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-gtht-4h82-pqg4
2
vulnerability VCID-kexn-gjxj-uudm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.11.2
Affected_packages
0
url pkg:npm/moment@1.0.0
purl pkg:npm/moment@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.0.0
1
url pkg:npm/moment@1.0.1
purl pkg:npm/moment@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.0.1
2
url pkg:npm/moment@1.1.0
purl pkg:npm/moment@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.1.0
3
url pkg:npm/moment@1.1.1
purl pkg:npm/moment@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.1.1
4
url pkg:npm/moment@1.2.0
purl pkg:npm/moment@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.2.0
5
url pkg:npm/moment@1.3.0
purl pkg:npm/moment@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.3.0
6
url pkg:npm/moment@1.4.0
purl pkg:npm/moment@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.4.0
7
url pkg:npm/moment@1.5.0
purl pkg:npm/moment@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.5.0
8
url pkg:npm/moment@1.5.1
purl pkg:npm/moment@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.5.1
9
url pkg:npm/moment@1.6.0
purl pkg:npm/moment@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.6.0
10
url pkg:npm/moment@1.6.1
purl pkg:npm/moment@1.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.6.1
11
url pkg:npm/moment@1.6.2
purl pkg:npm/moment@1.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.6.2
12
url pkg:npm/moment@1.7.0
purl pkg:npm/moment@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.7.0
13
url pkg:npm/moment@1.7.1
purl pkg:npm/moment@1.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.7.1
14
url pkg:npm/moment@1.7.2
purl pkg:npm/moment@1.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@1.7.2
15
url pkg:npm/moment@2.0.0
purl pkg:npm/moment@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.0.0
16
url pkg:npm/moment@2.1.0
purl pkg:npm/moment@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.1.0
17
url pkg:npm/moment@2.2.1
purl pkg:npm/moment@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.2.1
18
url pkg:npm/moment@2.3.0
purl pkg:npm/moment@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.3.0
19
url pkg:npm/moment@2.3.1
purl pkg:npm/moment@2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.3.1
20
url pkg:npm/moment@2.4.0
purl pkg:npm/moment@2.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.4.0
21
url pkg:npm/moment@2.5.0
purl pkg:npm/moment@2.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.5.0
22
url pkg:npm/moment@2.5.1
purl pkg:npm/moment@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.5.1
23
url pkg:npm/moment@2.6.0
purl pkg:npm/moment@2.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.6.0
24
url pkg:npm/moment@2.7.0
purl pkg:npm/moment@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.7.0
25
url pkg:npm/moment@2.8.1
purl pkg:npm/moment@2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.8.1
26
url pkg:npm/moment@2.8.2
purl pkg:npm/moment@2.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.8.2
27
url pkg:npm/moment@2.8.3
purl pkg:npm/moment@2.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.8.3
28
url pkg:npm/moment@2.8.4
purl pkg:npm/moment@2.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.8.4
29
url pkg:npm/moment@2.9.0
purl pkg:npm/moment@2.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.9.0
30
url pkg:npm/moment@2.10.2
purl pkg:npm/moment@2.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.10.2
31
url pkg:npm/moment@2.10.3
purl pkg:npm/moment@2.10.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.10.3
32
url pkg:npm/moment@2.10.5
purl pkg:npm/moment@2.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.10.5
33
url pkg:npm/moment@2.10.6
purl pkg:npm/moment@2.10.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.10.6
34
url pkg:npm/moment@2.11.0
purl pkg:npm/moment@2.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.11.0
35
url pkg:npm/moment@2.11.1
purl pkg:npm/moment@2.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cjwf-nuwg-4yc2
1
vulnerability VCID-fg81-yqah-rbep
2
vulnerability VCID-gtht-4h82-pqg4
3
vulnerability VCID-kexn-gjxj-uudm
4
vulnerability VCID-quy6-sg5w-qyhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/moment@2.11.1
References
0
reference_url https://github.com/advisories/GHSA-hxf5-mg84-pj4m
reference_id
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-hxf5-mg84-pj4m
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4055
reference_id CVE-2016-4055
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4055
Weaknesses
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fg81-yqah-rbep