Cx62f5bb1b-fa5e @ Npm-moment-2.20.1

[Svetlana-github]

Vulnerable Package issue exists @ Npm-moment-2.20.1 in branch main

A Regular Expression Denial of Service (ReDoS) in moment 2.18 through 2.29.3 makes the server unavailable when a specially crafted input is provided to the default function moment(), which nearly matches the pattern being matched.
This will cause the regular expression matching to take a long time, all the while occupying the event loop and preventing it from processing other requests.

Namespace: Svetlana-github
Repository: test
Repository Url: https://github.com/Svetlana-github/test
CxAST-Project: Svetlana-github/test
CxAST platform scan: 8821ba41-d324-41fa-8053-d13dfc156a43
Branch: main
Application: test
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-1333

---

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 2.29.4

---

References
Issue
Commit
Pull request
Advisory