Skip to content
OpenAdvisories

Package · npm

luxon

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    luxon.js inefficient regular expression complexity vulnerability

    Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch prior to 2.5.2, and the 3.x branch on 3.2.1, Luxon's `DateTime.fromRFC2822() has quadratic (N^2) complexity on some specific inputs. This caus…