Skip to content
OpenAdvisories

Package · npm

moment-timezone

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-v78c-4p63-2j6c

    Cleartext Transmission of Sensitive Information in moment-timezone

    ### Impact * if Alice uses `grunt data` (or `grunt release`) to prepare a custom-build, moment-timezone with the latest tzdata from IANA's website * and Mallory intercepts the request to IANA's unencrypted ftp server, Mallory can serve data which might exploi…

    moment-timezone npm