Skip to content
OpenAdvisories

Package · Ubuntu

python-xstatic-moment

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-17495

    moment vulnerable to Path Traversal via crafted non-string locale name

    moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale() can bypass the locale-name path-traversal guard. The guard assu…

    moment moment node-moment moment Debian Ubuntu npm