Skip to content
OpenAdvisories

Package · npm

angular-expressions

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical 9.3
    CVE-2026-44643

    Angular Expressions - Remote Code Execution using filters

    Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability i…

    peerigon angular-expressions angular-expressions npm
  • Critical 9.3
    CVE-2024-54152 Public exploit

    Angular Expressions - Remote Code Execution when using locals

    Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex (undis…

    peerigon angular-expressions angular-expressions npm
  • High 8.5
    CVE-2021-21277

    Angular Expressions - Remote Code Execution

    angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compile(userControlledIn…

    peerigon angular-expressions angular-expressions npm
  • High 8.7
    CVE-2020-5219

    Remote Code Execution in Angular Expressions

    Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker co…

    peerigon angular-expressions angular-expressions npm