MEDIUMnpm
GHSA-28hp-fgcr-2r4hCross-Site Scripting via JSONP
Modified: 2/24/2021
package
npm/angular
pkg:npm/angular
MEDIUM5.3npm
GHSA-2qqx-w9hr-q5gx· CVE-2023-26117angular vulnerable to regular expression denial of service via the $resource service
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-2vrf-hf26-jrp5· CVE-2023-26116angular vulnerable to regular expression denial of service via the angular.copy() utility
Modified: 9/10/2026
HIGH7.5npmMaven
GHSA-4w4v-5hc9-xrr2· CVE-2024-21490angular vulnerable to super-linear runtime due to backtracking
Modified: 9/10/2026
MEDIUM5.0npm
GHSA-5cp4-xmrw-59wfXSS via JQLite DOM manipulation functions in AngularJS
Modified: 10/8/2021
HIGH7.6npm
GHSA-7x27-g8rg-x87w· CVE-2026-11998Angular's deprecated package has a Cross-Site Scripting issue
Modified: 7/17/2026
HIGH7.5npm
GHSA-89mq-4x47-5v83· CVE-2019-10768, SNYK-JS-ANGULAR-534884angular Prototype Pollution vulnerability
Modified: 7/8/2026
MEDIUM4.8npm
GHSA-j58c-ww9w-pwp5· CVE-2025-0716AngularJS improperly sanitizes SVG elements
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-m2h2-264f-f486· CVE-2022-25844angular vulnerable to regular expression denial of service (ReDoS)
Modified: 9/10/2026
MEDIUM4.8npm
GHSA-m9gf-397r-hwpg· CVE-2024-8372AngularJS allows attackers to bypass common image source restrictions
Modified: 9/10/2026
MEDIUM5.4npm
GHSA-mhp6-pxh8-r675· CVE-2020-7676, SNYK-JS-ANGULAR-570058Angular vulnerable to Cross-site Scripting
Modified: 9/10/2026
MEDIUM4.8npm
GHSA-mqm9-c95h-x2p6· CVE-2024-8373AngularJS allows attackers to bypass common image source restrictions
Modified: 9/10/2026
MEDIUM6.1npm
GHSA-prc3-vjfx-vhm9· CVE-2022-25869Angular (deprecated package) Cross-site Scripting
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-qwqh-hm9m-p5hr· CVE-2023-26118angular vulnerable to regular expression denial of service via the <input type="url"> element
Modified: 9/10/2026
MEDIUM6.1npm
GHSA-r5fx-8r73-v86c· CVE-2019-14863AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes
Modified: 11/20/2025