[buddypress-trac] [BuddyPress Trac] #8766: moment.js is outdated and has CVEs

buddypress-trac noreply at wordpress.org
Mon Nov 14 18:40:24 UTC 2022


#8766: moment.js is outdated and has CVEs
--------------------------+-----------------------
 Reporter:  thomaslhotta  |       Owner:  imath
     Type:  task          |      Status:  assigned
 Priority:  high          |   Milestone:  11.0.0
Component:  Core          |     Version:  10.6.0
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+-----------------------
Changes (by imath):

 * priority:  normal => high


Comment:

 I confirm WordPress uses v2.29.4 of moment.js. I don't think we've made
 custom changes to this library, I just need to check it was already
 bundled in version 5.4 of WordPress. If so we should use this one and stop
 including moment.js into the plugin.

-- 
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/8766#comment:2>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list