Skip to content
OpenAdvisories

Package · Ubuntu

angular.js

46 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2026-32635 Public exploit

    Angular has XSS in i18n attribute bindings

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Ang…

    angular core compiler angular.js Debian Ubuntu npm
  • High 8.5
    CVE-2026-22610 Public exploit

    Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in …

    angular angular angular.js @angular/core Ubuntu npm
  • High 7.5
    CVE-2024-21490 Public exploit

    angular vulnerable to super-linear runtime due to backtracking

    This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-craf…

    angular.js angular.js angular org.webjars.npm:angular Debian Ubuntu npm Maven
  • Medium 4.2
    CVE-2022-25869 Public exploit

    Angular (deprecated package) Cross-site Scripting

    All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <t…

    angular.js angular.js angular Debian Ubuntu npm