CVE:CVE-2020-26289
CNNVD:CNNVD-202012-1645
Date And Time是Date And Time个人开发者的一个基于Javascript用于处理JS日期和时间的Npm代码库。
date-and-time 0.14.2之前版本存在安全漏洞，该漏洞源于涉及解析的正则表达式，它可以被用来导致拒绝服务。
solution:Upgrade date-and-time_project date-and-time to a higher version than 0.14.2,and avoid the version (,0.14.2)