Skip to content
OpenAdvisories
High DLA-1995-1 1 CVE

angular.js - security update

Published Nov 18, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 angular.js 1.2.26-1+deb8u1

Vulnerabilities 1

  • High 7.1
    CVE-2019-14863

    AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes

    There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

    Red Hat angular: angular.js angular.js Debian Ubuntu npm