Moment.js vulnerable to Inefficient Regular Expression Complexity

Description

No description available.

Recommendation

Update the moment package to the latest compatible version. Followings are version details:

Affected version(s): >= 2.18.0, < 2.29.4
Patched version(s): 2.29.4

References

Could your website be exposed too?

SmartScanner can check your website for Moment.js vulnerable to Inefficient Regular Expression Complexity and gives you actionable findings to investigate.

Start a free scan

Related Issues

v8n vulnerable to Inefficient Regular Expression Complexity - CVE-2022-35923
Cattown is Vulnerable to Uncontrolled Resource Consumption through Inefficient Regular Expression Complexity - CVE-2025-58451
inflect vulnerable to Inefficient Regular Expression Complexity - CVE-2021-3820
Inefficient Regular Expression Complexity in marked - CVE-2022-21680

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated November 04, 2025