Skip to content
OpenAdvisories

Archive

30 August 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low —

    Command Injection in moment-timezone

    ### Impact All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. * if Alice uses tzdata pipeline to package moment-timezone on her own (for example via `grunt data:2014d`, where `2014d` stands for the version of the t…