Skip to content
OpenAdvisories

Package · npm

moment-timezone

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-56x4-j7p9-fcf9

    Command Injection in moment-timezone

    ### Impact All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. * if Alice uses tzdata pipeline to package moment-timezone on her own (for example via `grunt data:2014d`, where `2014d` stands for the version of the t…

    moment-timezone npm