Tag

moment-js

Safeguard articles tagged "moment-js" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerabilities

CVE-2017-18214: Why an Old CVE Still Shows Up in Scans

CVE-2017-18214 is a ReDoS bug in Moment.js patched back in 2017, yet it keeps surfacing in scans years later because bundled copies and stale lockfiles never got the memo.

Apr 9, 20244 min read