angular

7 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-21490≥ 1.3.0This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split thHIGH 7.51.9 %
CVE-2023-26116≥ 1.2.21Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility fuMEDIUM 5.31.7 %
CVE-2023-26118≥ 1.4.9Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> elementMEDIUM 5.31.7 %
CVE-2023-26117≥ 1.0.0Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to tMEDIUM 5.31.7 %
CVE-2022-25869*All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to CroMEDIUM 6.17.7 %
CVE-2021-423111.0.0 ; 11.0.1 ; 11.0.2 ; …Angular Comment cross site scriptingMEDIUM 5.41.2 %
CVE-2022-25844next of 1.7.0 – < unspecifiedRegular Expression Denial of Service (ReDoS)HIGH 7.54.9 %