[buddypress-trac] [BuddyPress Trac] #8766: moment.js is outdated and has CVEs

buddypress-trac noreply at wordpress.org
Tue Nov 15 15:05:55 UTC 2022


#8766: moment.js is outdated and has CVEs
-----------------------------------+-----------------------
 Reporter:  thomaslhotta           |       Owner:  imath
     Type:  task                   |      Status:  assigned
 Priority:  high                   |   Milestone:  11.0.0
Component:  Core                   |     Version:  10.6.0
 Severity:  normal                 |  Resolution:
 Keywords:  has-patch 2nd-opinion  |
-----------------------------------+-----------------------

Comment (by dcavins):

 Let's deprecate and remove in 12, as we normally would. The issues with
 the old moment.js don't seem worthy of creating an emergency. :)

 I'm 100% in favor of letting WP provide the moment library though, as it,
 like `at.js`, is no longer actively maintained and will require manual
 care.

 Thanks for the good-looking patch! I'll try it today.

-- 
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/8766#comment:6>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list