[Bug 2105075] CVE-2022-31129 moment: inefficient parsing algorithim resulting in DoS
https://bugzilla.redhat.com/show_bug.cgi?id=2105075
--- Comment #13 from Parag Nemade <pnemade(a)redhat.com> ---
(In reply to Tomas Hoger from comment #8)
In reply to comment #2:
> Why have you CC'ed many people or to exact i18n-bugs list to this bug?
i18n-bugs is on the initial CC list for the cldr-emoji-annotation component,
which was added as possibly affected by this issue. The package is
considered to include moment because of moment being listed in
tools/cldr-apps/js/package-lock.json (in sources). However, moment does not
seem to be included in the srpm and also in any binary rpm, hence this looks
like false positive.
Thank you for confirming this false positive.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2105075