Launchpad.net

CVE 2017-18214

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

See the CVE page on Mitre.org for more details.