The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Atlassian Bitbucket | — | Upgrade Atlassian Bitbucket to the latest version | Nov 19, 2025 | Nov 18, 2025 |
| Centos_linux | — | Upgrade cephfs-mirrorUpgrade libcephfs2-debuginfoUpgrade libradospp-develUpgrade ceph-mds-debuginfoUpgrade ceph-fuseUpgrade python3-cephfs-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade python3-rgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-iscsiUpgrade ceph-grafana-dashboardsUpgrade ceph-test-debuginfoUpgrade libcephfs-develUpgrade ceph-mgr-debuginfoUpgrade libcephfs2Upgrade librgw-develUpgrade ceph-immutable-object-cacheUpgrade librados-devel-debuginfoUpgrade ceph-resource-agentsUpgrade cephadmUpgrade rbd-nbd-debuginfoUpgrade librados-develUpgrade ceph-base-debuginfoUpgrade rbd-nbdUpgrade ceph-baseUpgrade ceph-fuse-debuginfoUpgrade ceph-radosgwUpgrade ceph-mibUpgrade python3-cephfsUpgrade ceph-osd-debuginfoUpgrade libradosstriper1-debuginfoUpgrade libcephsqlite-debuginfoUpgrade ceph-mdsUpgrade python3-rbdUpgrade python3-radosUpgrade librgw2-debuginfoUpgrade rbd-mirrorUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-commonUpgrade ceph-immutable-object-cache-debuginfoUpgrade libradosstriper1Upgrade ceph-mon-debuginfoUpgrade python3-rgwUpgrade ceph-debugsourceUpgrade ceph-selinuxUpgrade ceph-common-debuginfoUpgrade ceph-commonUpgrade cephfs-topUpgrade python3-ceph-argparseUpgrade librbd-develUpgrade python3-rados-debuginfoUpgrade librgw2Upgrade ceph-ansible | Jan 12, 2023 | Apr 4, 2022 |
| Debian | — | Upgrade node-moment | Feb 1, 2023 | Apr 4, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 4, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 4, 2022 |
| Redhat_linux | — | Upgrade ceph-immutable-object-cacheUpgrade python3-rbd-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-ansibleUpgrade rbd-nbdUpgrade libradosstriper1-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-mibUpgrade ceph-iscsiUpgrade rbd-fuse-debuginfoUpgrade libradospp-develUpgrade ceph-fuse-debuginfoUpgrade cephfs-topUpgrade python3-rgw-debuginfoUpgrade ceph-mds-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade libcephfs-develUpgrade ceph-commonNo solution existsUpgrade ceph-baseUpgrade ceph-selinuxUpgrade ceph-radosgwUpgrade ceph-common-debuginfoUpgrade cephadmUpgrade python3-radosUpgrade rbd-mirrorUpgrade librbd-develUpgrade libradosstriper1Upgrade libcephsqlite-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-fuseUpgrade python3-rbdUpgrade cephfs-mirrorUpgrade ceph-mon-debuginfoUpgrade python3-rgwUpgrade ceph-mdsUpgrade ceph-debugsourceUpgrade python3-ceph-argparseUpgrade ceph-base-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-grafana-dashboardsUpgrade python3-cephfsUpgrade librgw2Upgrade librgw-develUpgrade libcephfs2Upgrade ceph-radosgw-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs2-debuginfoUpgrade librados-develUpgrade python3-cephfs-debuginfoUpgrade python3-ceph-commonUpgrade python3-rados-debuginfoUpgrade rbd-mirror-debuginfo | Jan 12, 2023 | Apr 4, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.13Upgrade Splunk Enterprise to version 9.0.4Upgrade Splunk Enterprise to version 8.2.10 | Sep 30, 2025 | Apr 4, 2022 |
| Ubuntu | — | Upgrade libjs-momentUpgrade node-moment | Aug 11, 2022 | Apr 4, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub