All products

angular

npm · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AngularJS improperly sanitizes SVG elementsCVE-2025-0716 · GHSA-J58C-WW9W-PWP5 angularLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Low No fix reported
AngularJS allows attackers to bypass common image source restrictionsCVE-2024-8373 · GHSA-MQM9-C95H-X2P6 angular npm Low No fix reported
AngularJS allows attackers to bypass common image source restrictionsCVE-2024-8372 · GHSA-M9GF-397R-HWPG angular npm Low No fix reported
angular vulnerable to super-linear runtime due to backtrackingCVE-2024-21490 · GHSA-4W4V-5HC9-XRR2 org.webjars.bower:angularorg.webjars.npm:angular MavennpmRed Hat High No fix reported
Angular (deprecated package) Cross-site ScriptingCVE-2022-25869 · GHSA-PRC3-VJFX-VHM9 angular npm Medium No fix reported
angular vulnerable to regular expression denial of service via the angular.copy() utilityCVE-2023-26116 · GHSA-2VRF-HF26-JRP5 angularOpenShift Service Mesh 2.1/servicemesh-grafana npmRed Hat Medium No fix reported
angular vulnerable to regular expression denial of service via the $resource serviceCVE-2023-26117 · GHSA-2QQX-W9HR-Q5GX angularOpenShift Service Mesh 2.1/servicemesh-grafana npmRed Hat Medium No fix reported
angular vulnerable to regular expression denial of service via the <input type="url"> elementCVE-2023-26118 · GHSA-QWQH-HM9M-P5HR angularOpenShift Service Mesh 2.1/servicemesh-grafana npmRed Hat Medium No fix reported
angular vulnerable to regular expression denial of service (ReDoS)CVE-2022-25844 · GHSA-M2H2-264F-F486 angularOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium No fix reported
Angular's deprecated package has a Cross-Site Scripting issueCVE-2026-11998 · GHSA-7X27-G8RG-X87W angularRed Hat Single Sign-On 7/angular npmRed Hat High No fix reported
Angular vulnerable to Cross-site ScriptingCVE-2020-7676 · GHSA-MHP6-PXH8-R675 angularOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat Medium Fix reported
AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributesCVE-2019-14863 · GHSA-R5FX-8R73-V86C angular npm Medium Fix reported
angular Prototype Pollution vulnerabilityCVE-2019-10768 · GHSA-89MQ-4X47-5V83 angularRed Hat AMQ Broker 7/angularjs npmRed Hat High Fix reported
XSS via JQLite DOM manipulation functions in AngularJSGHSA-5CP4-XMRW-59WF angular npm Medium Fix reported
Cross-Site Scripting via JSONPGHSA-28HP-FGCR-2R4H angular npm Medium Fix reported