pkg:npm/angular

共 12 筆 CVEHIGH2MEDIUM10

✅ 檢查你的版本

所有已知漏洞

  • HIGH7.5CVE-2024-21490angular vulnerable to super-linear runtime due to backtracking
    >= 1.3.0, <= 1.8.3
  • HIGH7.5CVE-2019-10768angular Prototype Pollution vulnerability
    from 0, < 1.7.9
  • MEDIUM6.1CVE-2022-25869Angular (deprecated package) Cross-site Scripting
    from 0, <= 1.8.3
  • MEDIUM6.1CVE-2019-14863AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes
    from 0, < 1.5.0-beta.1
  • MEDIUM5.4CVE-2020-7676Angular vulnerable to Cross-site Scripting
    from 0, < 1.8.0
  • MEDIUM5.3CVE-2023-26117angular vulnerable to regular expression denial of service via the $resource service
    from 0, <= 1.8.3
  • MEDIUM5.3CVE-2023-26116angular vulnerable to regular expression denial of service via the angular.copy() utility
    from 0, <= 1.8.3
  • MEDIUM5.3CVE-2023-26118angular vulnerable to regular expression denial of service via the <input type="url"> element
    from 0, <= 1.8.3
  • MEDIUM5.3CVE-2022-25844angular vulnerable to regular expression denial of service (ReDoS)
    >= 1.7.0
  • MEDIUM4.8CVE-2025-0716AngularJS improperly sanitizes SVG elements
    from 0, <= 1.8.3
  • MEDIUM4.8CVE-2024-8372AngularJS allows attackers to bypass common image source restrictions
    >= 1.3.0-rc.4, <= 1.8.3
  • MEDIUM4.8CVE-2024-8373AngularJS allows attackers to bypass common image source restrictions
    from 0, <= 1.8.3