Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10857
  • npm/@gocortexio/npmgremlinbox-typosquat-moment
Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm) 2 days ago
  • No fix available
MAL-2025-49253
  • npm/cordova-plugin-globalization.moment
Malicious code in cordova-plugin-globalization.moment (npm) 30 Oct 2025
  • No fix available
MAL-2025-26625
  • npm/moment-poc
Malicious code in moment-poc (npm) 14 Aug 2025
  • No fix available
MAL-2025-29408
  • npm/plottable-moment
Malicious code in plottable-moment (npm) 14 Aug 2025
  • No fix available
MAL-2025-3157
  • npm/moment-encryption
Malicious code in moment-encryption (npm) 07 Apr 2025
  • No fix available
GHSA-56x4-j7p9-fcf9
  • npm/moment-timezone
Command Injection in moment-timezone 30 Aug 2022
  • Fix available
GHSA-v78c-4p63-2j6c
  • npm/moment-timezone
Cleartext Transmission of Sensitive Information in moment-timezone 30 Aug 2022
  • Fix available
GHSA-wc69-rhjr-hc9g
  • NuGet/Moment.js
  • npm/moment
Moment.js vulnerable to Inefficient Regular Expression Complexity 06 Jul 2022
  • Fix available
  • Severity - 7.5 (High)
MAL-2022-912
  • npm/airbnb-moment-more-formats
Malicious code in airbnb-moment-more-formats (npm) 20 Jun 2022
  • No fix available
MAL-2022-2355
  • npm/datetime-moment-parser
Malicious code in datetime-moment-parser (npm) 20 Jun 2022
  • No fix available
GHSA-8hfj-j24r-96c4
  • NuGet/Moment.js
  • npm/moment
Path Traversal: 'dir/../../filename' in moment.locale 04 Apr 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-hrpp-f84w-xhfg
  • npm/vue-moment
Outdated Static Dependency in vue-moment 04 Sep 2020
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-446m-mv8f-q348
  • npm/moment
Regular Expression Denial of Service in moment 05 Mar 2018
  • Fix available
  • Severity - 7.5 (High)
GHSA-87vv-r9j6-g5qv
  • npm/moment
Regular Expression Denial of Service in moment 24 Oct 2017
  • Fix available
  • Severity - 6.5 (Medium)