Security vulnerability: Outdated moment.js in Sleekplan plugin

A customer reported that the Sleekplan plugin is using an outdated version of moment.js (v2.24.0) which contains known vulnerabilities (CVE-2022-31129, CVE-2022-24785). The vulnerability was detected by an external scanner and originates from a third-party script loaded from Sleekplan’s client domain (client.sleekplan.com). The customer requests that the moment.js component be updated to a secure version. Evidence: Screenshot of vulnerability scan Customer: Gaute Wangen (gaute@diri.no) Action taken: Support acknowledged and escalated to backend for review.