Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-hrpp-f84w-xhfg

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-hrpp-f84w-xhfg

Outdated Static Dependency in vue-moment Versions of `vue-moment` prior to 4.1.0 contain an Outdated Static Dependency. The package depends on `moment` and has it loaded statically instead of as a dependency that can be updated. It has `moment@2.19.1` that contains a Regular Expression Denial of Service vulnerability. ## Recommendation Upgrade to version 4.1.0 or later.

gitlab/npm/vue-moment/GMS-2020-550

Outdated Static Dependency in vue-moment Versions of `vue-moment` contain an Outdated Static Dependency. The package depends on `moment` and has it loaded statically instead of as a dependency that can be updated. It has `moment@2.19.1` that contains a Regular Expression Denial of Service vulnerability.