Skip to content
OpenAdvisories

Package · npm

vue-moment

1 known vulnerabilities.

1 result · Feed

  • Medium 5.3

    Outdated Static Dependency in vue-moment

    Versions of `vue-moment` prior to 4.1.0 contain an Outdated Static Dependency. The package depends on `moment` and has it loaded statically instead of as a dependency that can be updated. It has `moment@2.19.1` that contains a Regular Expression Denial of Ser…