Archive
30 August 2022
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Low —
Command Injection in moment-timezone
### Impact All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. * if Alice uses tzdata pipeline to package moment-timezone on her own (for example via `grunt data:2014d`, where `2014d` stands for the version of the t…