Vulnerability in the moment module before 2.19.3

[ale4ko69]

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
https://www.cvedetails.com/cve/CVE-2017-18214/

[BrockReece]

Is this in reference to the change proposed in #125?
I can bump the package version on again?

[ale4ko69]

Perhaps this is the same problem.
I just updated the library to version 4.0.0 and saw that the last update on npm was a year ago.
Therefore, I am not sure that the latest version of moments 2.24.0 is used there

[BrockReece]

That PR updates the yarn.lock to v2.24.0

https://github.com/brockpetrie/vue-moment/pull/125/files#diff-8ee2343978836a779dc9f8d6b794c3b2

[ale4ko69]

This is what I see after the update via the npm update vue-moment command

[BrockReece]

We haven't released the new version yet

[ale4ko69]

ok, thanks

[BrockReece]

v4.1.0 is out now and should include the latest version of vue-moment