Tag

day-js

Safeguard articles tagged "day-js" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerabilities

CVE-2022-31129: The Day.js ReDoS Vulnerability, Explained

CVE-2022-31129 is a regular expression denial of service in Day.js's custom parse format handling. Here's what triggered it, why it's still showing up in scans, and how it was fixed.

Mar 19, 20245 min read