{"id":"CVE-2017-18214","aliases":["AZL-32178","AZL-41019","CLSA-2026-1773101684","CLSA-2026-1784856185","DEBIAN-CVE-2017-18214","EUVD-2018-0169","GHSA-446m-mv8f-q348","RHSA-2023:0552","RHSA-2023:0553","RHSA-2023:0554","ROOT-APP-NPM-CVE-2017-18214","UBUNTU-CVE-2017-18214","USN-4786-1"],"status":"published","title":"Regular Expression Denial of Service in moment","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03649,"percentile":0.89672,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2018-03-04T21:00:00Z","modified":"2026-11-06T10:15:03Z","fixes":[{"ecosystem":"npm","package":"moment","fixed_in":["2.19.3"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"reaper","fixed_in":["3.1.1-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ntopng","fixed_in":["5.2.1-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"node-moment","fixed_in":["2.19.3+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"node-moment","fixed_in":["2.19.3+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"node-moment","fixed_in":["2.19.3+ds-1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"moment","fixed_in":["2.0.0-aikido.4","2.19.3-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/moment","fixed_in":["2.0.0-root.io.2","2.0.0-root.io.1","2.0.0-root.io.3","2.0.0-root.io.4","2.19.3-root.io.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"node-moment","fixed_in":["2.11.0+ds-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"reaper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ntopng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-4"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.6-tuxcare.0"},{"fixed":"2.10.6-tuxcare.1"}]}],"versions":["2.10.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0-tuxcare.0"},{"fixed":"2.0.0-tuxcare.1"}]}],"versions":["2.0.0"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.3+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.3+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.3+ds-1"}]}]},{"source":"osv","ecosystem":"npm","package":"moment","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.19.3"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jettison","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.redhat_00002.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-woodstox-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-1.redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-1.redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-elytron-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-search-backend-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-search-backend-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-search-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-search-orm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-search-serialization-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-javaee-security-soteria","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-javaee-security-soteria-enterprise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.49-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-6.SP07_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-3.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-1.SP3_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el7eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jettison","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.redhat_00002.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-woodstox-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-1.redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-1.redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-elytron-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-search-backend-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-search-backend-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-search-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-search-orm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-search-serialization-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-javaee-security-soteria","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-javaee-security-soteria-enterprise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.49-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-6.SP07_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-3.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-1.SP3_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el8eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jettison","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.redhat_00002.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-woodstox-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.0-1.redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-1.redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-elytron-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-search-backend-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-search-backend-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-search-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-search-orm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-search-serialization-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.13-3.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.7-1.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-javaee-security-soteria","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-javaee-security-soteria-enterprise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.49-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-6.SP07_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-3.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.27-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-24.Final_redhat_00023.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-1.SP3_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.9-4.GA_redhat_00003.1.el9eap"}]}],"bundled":19},{"source":"osv","ecosystem":"Root:npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-aikido.4"},{"fixed":"2.19.3-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-root.io.2"},{"fixed":"2.0.0-root.io.1"},{"fixed":"2.0.0-root.io.3"},{"fixed":"2.0.0-root.io.4"},{"fixed":"2.19.3-root.io.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0+ds-1ubuntu0.1~esm1"}]}],"versions":["2.10.6+dfsg-1","2.11.0+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0+ds-1ubuntu0.1~esm1"}]}],"versions":["2.10.6+dfsg-1","2.11.0+ds-1"],"bundled":2}],"products":[{"vendor":"momentjs","product":"moment"},{"vendor":"tenable","product":"nessus"}],"references":[{"url":"https://github.com/moment/moment/issues/4163","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://nodesecurity.io/advisories/532","tags":["x_refsource_CONFIRM","x_transferred","Not Applicable","URL Repurposed","advisory","report"]},{"url":"https://www.tenable.com/security/tns-2019-02","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18214","tags":["web","advisory"]},{"url":"https://github.com/moment/moment/pull/4326","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-446m-mv8f-q348","tags":["advisory"]},{"url":"https://www.npmjs.com/advisories/532","tags":["web"]},{"url":"https://github.com/moment/moment/commit/69ed9d44957fa6ab12b73d2ae29d286a857b80eb","tags":["web","report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-18214","tags":["advisory"]},{"url":"https://github.com/moment/moment","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0552","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2145194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155970","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-23864","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23865","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23866","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23926","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24055","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24081","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24095","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24100","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24127","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24128","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24132","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24147","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24167","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24191","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24195","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24207","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24248","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24426","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24427","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0552.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-9251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-9251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-9251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10735","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18214","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18214","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-8331","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8331","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11358","tags":["advisory"]},{"url":"https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/","tags":["article"]},{"url":"https://www.drupal.org/sa-core-2019-006","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","tags":["advisory"]},{"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40149","tags":["advisory"]},{"url":"https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40150","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40152","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3f7h-mf4q-vrm4","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42003","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42003","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42004","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-45047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45047","tags":["advisory"]},{"url":"https://www.mail-archive.com/dev@mina.apache.org/msg39312.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-45693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45693","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46364","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0553","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-23927","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0553.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0554","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-23928","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0554.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-18214","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4786-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-4055","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-18214","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:00:00Z","modified":"2024-08-05T21:13:49.174Z","updated_at":"2026-11-02T14:33:21.747294Z"}],"euvd":[{"id":"EUVD-2018-0169","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:00:00Z","modified":"2024-08-05T21:13:49Z","updated_at":"2026-11-03T02:23:07.6199Z"}],"ghsa":[{"id":"GHSA-446m-mv8f-q348","title":"Regular Expression Denial of Service in moment","description":"Affected versions of `moment` are vulnerable to a low severity regular expression denial of service when parsing dates as strings.\n\n\n## Recommendation\n\nUpdate to version 2.19.3 or later.","status":"published","published":"2018-03-05T18:35:09Z","modified":"2023-04-14T19:11:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:36:50.476488Z"}],"nvd":[{"id":"CVE-2017-18214","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:29:00.23Z","modified":"2026-06-17T01:12:24.603Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:04:15.877386Z"}],"osv":[{"id":"AZL-32178","title":"CVE-2017-18214 affecting package reaper for versions less than 3.1.1-10","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:29:00Z","modified":"2026-04-21T04:26:41.821294Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-41019","title":"CVE-2017-18214 affecting package ntopng for versions less than 5.2.1-4","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:29:00Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"CVE-2017-18214","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:29:00.23Z","modified":"2026-10-20T10:48:17.07678705Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-18214","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:29:00.23Z","modified":"2026-09-01T20:03:46.938422851Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"GHSA-446m-mv8f-q348","title":"Regular Expression Denial of Service in moment","description":"Affected versions of `moment` are vulnerable to a low severity regular expression denial of service when parsing dates as strings.\n\n\n## Recommendation\n\nUpdate to version 2.19.3 or later.","status":"published","published":"2018-03-05T18:35:09Z","modified":"2023-11-08T03:59:15.374363Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:36.434231Z"},{"id":"RHSA-2023:0552","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update","status":"published","published":"2024-09-27T15:16:37Z","modified":"2026-10-13T10:03:47Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0553","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update","status":"published","published":"2024-09-27T15:16:47Z","modified":"2026-10-13T10:03:47Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0554","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update","status":"published","published":"2024-09-27T15:16:26Z","modified":"2026-10-13T10:03:48Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2017-18214","description":"The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.","status":"published","published":"2018-03-04T21:29:00Z","modified":"2026-02-04T03:39:22.704394Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"CLSA-2026-1773101684","title":"TuxCare security update for moment (3 CVEs)","description":"TuxCare rebuilt moment to address 3 CVEs. Fixed in 2.10.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-15T09:45:26.074675881Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1784856185","title":"TuxCare security update for moment (2 CVEs)","description":"TuxCare rebuilt moment to address 2 CVEs. Fixed in 2.0.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:48Z","modified":"2026-10-15T09:47:54.740491129Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"ROOT-APP-NPM-CVE-2017-18214","title":"CVE-2017-18214 in moment - Patched by Root","description":"Root has patched CVE-2017-18214 in the moment package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-06T09:36:05Z","modified":"2026-11-06T10:15:03.099080868Z","updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"USN-4786-1","title":"node-moment vulnerabilities","description":"It was discovered that Moment.js mishandled certain regular expressions. An\nattacker could use this vulnerability to cause a denial of service.","status":"published","published":"2021-03-15T21:04:13Z","modified":"2026-06-25T13:30:25.055813465Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}