All ideas

Security vulnerability: Outdated moment.js in Sleekplan plugin

A customer reported that their external vulnerability scanner detected a security issue in the Sleekplan plugin. The embedded widget loads an outdated version of moment.js (v2.24.0), which is affected by CVE-2022-31129 and CVE-2022-24785. The customer requests that the moment.js component be updated to a secure version. Details: Third-party script loaded from client.sleekplan.com Outdated moment.js (v2.24.0) Vulnerabilities: CVE-2022-31129, CVE-2022-24785 Screenshot provided Customer: Gaute Wangen (gaute@diri.no) Request: Update the moment.js component to address the vulnerabilities.