CyberSecBulletin

Angularjs vulnerabilities

We track 2 vulnerabilities in Angularjs products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 10, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Angularjs vulnerabilities

  • 7.5 High severity

    angular: Inefficient Regular Expression Complexity

    CVE-2024-21490AngularEPSS 1.89%

    This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-craft

  • 7.5 High severity

    angular: Inefficient Regular Expression Complexity

    CVE-2022-25844AngularEPSS 4.93%

    The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat() of NUMBER_FORMATS.PATTERNS[1].posPre with a very high value.