Angular: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• High 7.5
  CVE-2024-21490 Public exploit

  angular vulnerable to super-linear runtime due to backtracking

  This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-craf…

  angular.js angular.js angular org.webjars.bower:angular Debian Ubuntu npm Maven
  Feb 10, 2024

Revision history

1. 2026-01-13 #5

   Neue Updates aufgenommen

2. 2025-07-20 #4

   Neue Updates von Debian aufgenommen

3. 2024-05-22 #3

   Neue Updates von HCL aufgenommen

4. 2024-05-05 #2

   Neue Updates aufgenommen

5. 2024-02-11 #1

   Initiale Fassung

References

• Red Hat Bugtracker vom 2024-02-11
  https://bugzilla.redhat.com/show_bug.cgi?id=2263754
• GitHub Advisory Database vom 2024-02-11
  https://github.com/advisories/GHSA-4w4v-5hc9-xrr2
• Camunda Security Notices vom 2024-05-03
  https://docs.camunda.org/security/notices/
• HCL Security Bulletin vom 2024-05-23
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113349
• Debian Security Advisory DLA-4242 vom 2025-07-20
  https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html
• Ubuntu Security Notices USN-7958-1 vom 2026-01-14
  https://ubuntu.com/security/notices/USN-7958-1