Skip to content
OpenAdvisories

Package · npm

angular

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-21490 Public exploit

    angular vulnerable to super-linear runtime due to backtracking

    This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-craf…

    angular.js angular.js angular org.webjars.bower:angular Debian Ubuntu npm Maven
  • Medium 4.2
    CVE-2022-25869 Public exploit

    Angular (deprecated package) Cross-site Scripting

    All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <t…

    angular.js angular.js angular Debian Ubuntu npm