CVE:CVE-2022-31129
CNNVD:CNNVD-202207-502
Moment.js是一个 JavaScript 日期库。用于解析、验证、操作和格式化日期。
Moment.js 存在安全漏洞，该漏洞源于使用了低效的解析算法。在没有健全长度检查的情况下将用户提供的字符串传递给时刻构造函数的用户很容易受到正则拒绝服务攻击。
solution:Upgrade momentjs moment to a higher version than 2.29.4,and avoid the version [2.18.0,2.29.4); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0