Angularjs (Google) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-24. Vendor: Google.
CVEs of Angularjs
- CVE-2026-11998 - CVSS 7.6 (high), 2026-06-24: A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript…
- CVE-2025-4690 - CVSS 4.3 (medium), 2025-08-19: A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to…
- CVE-2025-2336 - CVSS 4.8 (medium), 2025-06-04: Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to…
- CVE-2025-0716 - CVSS 4.8 (medium), 2025-04-29: Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypass common image…
- CVE-2024-8373 - CVSS 4.8 (medium), 2024-09-09: Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source…
- CVE-2024-8372 - CVSS 4.8 (medium), 2024-09-09: Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to…
