npm - OSV

GHSA-4p3w-j4w9-5jqw

npm/moment

moment vulnerable to Path Traversal via crafted non-string locale name 6 days ago

Fix available
Severity - 5.9 (Medium)

MAL-2026-10857

npm/@gocortexio/npmgremlinbox-typosquat-moment

Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm) 20 Jul

No fix available

MAL-2025-49253

npm/cordova-plugin-globalization.moment

Malicious code in cordova-plugin-globalization.moment (npm) 30 Oct 2025

No fix available

MAL-2025-26625

npm/moment-poc

Malicious code in moment-poc (npm) 14 Aug 2025

No fix available

MAL-2025-29408

npm/plottable-moment

Malicious code in plottable-moment (npm) 14 Aug 2025

No fix available

MAL-2025-3157

npm/moment-encryption

Malicious code in moment-encryption (npm) 07 Apr 2025

No fix available

GHSA-56x4-j7p9-fcf9

npm/moment-timezone

Command Injection in moment-timezone 30 Aug 2022

Fix available

GHSA-v78c-4p63-2j6c

npm/moment-timezone

Cleartext Transmission of Sensitive Information in moment-timezone 30 Aug 2022

Fix available

GHSA-wc69-rhjr-hc9g

NuGet/Moment.js
npm/moment

Moment.js vulnerable to Inefficient Regular Expression Complexity 06 Jul 2022

Fix available
Severity - 7.5 (High)

MAL-2022-912

npm/airbnb-moment-more-formats

Malicious code in airbnb-moment-more-formats (npm) 20 Jun 2022

No fix available

MAL-2022-2355

npm/datetime-moment-parser

Malicious code in datetime-moment-parser (npm) 20 Jun 2022

No fix available

GHSA-8hfj-j24r-96c4

NuGet/Moment.js
npm/moment

Path Traversal: 'dir/../../filename' in moment.locale 04 Apr 2022

Fix available
Severity - 7.5 (High)

GHSA-hrpp-f84w-xhfg

npm/vue-moment

Outdated Static Dependency in vue-moment 04 Sep 2020

Fix available
Severity - 5.3 (Medium)

GHSA-446m-mv8f-q348

npm/moment

Regular Expression Denial of Service in moment 05 Mar 2018

Fix available
Severity - 7.5 (High)

GHSA-87vv-r9j6-g5qv

npm/moment

Regular Expression Denial of Service in moment 24 Oct 2017

Fix available
Severity - 6.5 (Medium)

Vulnerabilities