Angularjs vulnerabilities

2 known vulnerabilities in Angularjs from Angularjs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  angular: Inefficient Regular Expression Complexity

  CVE-2024-21490Feb 10, 2024AngularEPSS 1.89%

  This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-craft

• 7.5 High severity

  angular: Inefficient Regular Expression Complexity

  CVE-2022-25844May 1, 2022AngularEPSS 4.93%

  The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat() of NUMBER_FORMATS.PATTERNS[1].posPre with a very high value.