Tag

momentjs

Safeguard articles tagged "momentjs" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerabilities

CVE-2022-24785: The Moment.js Path Traversal, Explained

A user-controlled locale string was all it took: how CVE-2022-24785 let attackers traverse paths through Moment.js locale loading on Node.js, and why the fix is a one-line upgrade.

May 21, 20245 min read