An open index of dependabot pull requests across open source projects.

moment

Ecosystem:
npm
Package URL:
pkg:npm/moment
Total PRs:
1,601 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
1,283 repositories
Unique Repos (30 days):
109 repositories
Security Advisories
moment vulnerable to Path Traversal via crafted non-string locale name
GHSA-4p3w-j4w9-5jqw CVE-2026-17495 MODERATE published 25 days ago • updated 11 days ago
### Impact moment before 2.31.0 is vulnerable to path traversal in `moment.locale()`. When an application passes a non-string, attacker-influenced...
Moment.js vulnerable to Inefficient Regular Expression Complexity
GHSA-wc69-rhjr-hc9g CVE-2022-31129 HIGH published over 4 years ago • updated 12 days ago
### Impact * using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity ...
Path Traversal: 'dir/../../filename' in moment.locale
GHSA-8hfj-j24r-96c4 CVE-2022-24785 HIGH published over 4 years ago • updated 6 days ago
### Impact This vulnerability impacts npm (server) users of moment.js, especially if user provided locale string, eg `fr` is directly used to switc...
Regular Expression Denial of Service in moment
GHSA-87vv-r9j6-g5qv CVE-2016-4055 MODERATE published almost 9 years ago • updated about 7 hours ago
Versions of `moment` prior to 2.11.2 are affected by a regular expression denial of service vulnerability. The vulnerability is triggered when arbi...
Regular Expression Denial of Service in moment
GHSA-446m-mv8f-q348 CVE-2017-18214 HIGH published over 8 years ago • updated about 7 hours ago
Affected versions of `moment` are vulnerable to a low severity regular expression denial of service when parsing dates as strings. ## Recommendat...
Recent PRs
Package Details
Name: moment
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/moment
JSON API: View JSON
Security Advisories

5

Active advisories
HIGH 3
MODERATE 2
View All npm Advisories
Package Information
Description:

Parse, validate, manipulate, and display dates

Repository: https://github.com/moment/moment
Homepage: https://momentjs.com
Latest Release: 2.30.1
almost 3 years ago
Dependent Repos: 1,006,179
Dependent Packages: 54,055
Downloads: 103,812,550
Ranking: Top 0.034% by dependent repos Top 0.0193% by downloads Top 0.0018% by dependent pkgs
PR Status
Open 570 (35.6%)
Merged 93 (5.8%)
Closed 837 (52.3%)
PR Types
Major 2 (0.1%)
Minor 1,213 (75.8%)
Patch 282 (17.6%)
Removal 3 (0.2%)