We don't use moment.js directly, but as we have dependencies using moment, we'll monitor the issue nonetheless. https://nodesecurity.io/advisories/532