angular-expressions vulnerabilities

2 known vulnerabilities in angular-expressions from Peerigon. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  angular-expressions: Improper Neutralization of Directives in Dynamically Evaluated Code

  CVE-2026-44643May 11, 2026Peerigon

  Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is

• 9.3 Critical severity

  angular-expressions: Improper Control of Generation of Code

  CVE-2024-54152Dec 10, 2024PeerigonEPSS 2.24%

  Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex (undisc