https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:56:49.013671+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-8372 CVE-2024-8372 — AngularJS improper sanitization in 'srcset' attribute 2026-10-06T18:56:49.029137+00:00

Affected: Google AngularJS, angularjs angular.js

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing .

This issue affects AngularJS versions 1.3.0-rc.4 and greater.

Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .