Moment Regex vulnerability Issue

[finzero]

I'm using ZAP to pentest my application, after the scan there's a found a vulnerability in a regex expression (similar to issue moment/moment#4163)

Versions of ngx-bootstrap, Angular, and Bootstrap:
ngx-bootstrap: ^19.0.2
Angular:17.2.2
Bootstrap: ^4.5.3

is there any solution for this ?

[robinlieson92]

I'm experiencing the same issue, can the admin here (@lexasq) help to update the moment dependency to version 2.30.1 so that there are no vulnerable issues?

Versions of ngx-bootstrap, Angular, and Bootstrap:
ngx-bootstrap: ^19.0.2
Angular:19.2.9
Bootstrap: ^5.3.3

Find on this :
https://github.com/valor-software/ngx-bootstrap/blob/7d87cb4edb8981feb1bd8ccf5d25aa0ea7479b72/src/chronos/parse/regex.ts#L26C14-L26C24

same issue with moment.js vulnerable DDoS