Most recent entries from all

bdu:2023-05239

certfr-2023-avi-0245 — De multiples vulnérabilités ont été corrigées dans les produits IBM. Certaines d'entre elle…

certfr-2023-avi-0245

EUVD-2026-257665

fkie_cve-2022-25844

The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat() of NUMBER_FORMATS.PATTERNS[1].posPre with a very high value. **Note:** 1) This package has been deprecated and is no longer maintained. 2) The vulnerable versions are 1.7.0 and higher.

GHSA-m2h2-264f-f486 — angular vulnerable to regular expression denial of service (ReDoS)

Affected: npm: angular

AngularJS lets users write client-side web applications. The package angular after 1.7.0 is vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat() of NUMBER_FORMATS.PATTERNS[1].posPre with a very high value.

**Note:** 1. This package has been deprecated and is no longer maintained. 2. The vulnerable versions are 1.7.0 and higher.

gsd-2022-25844

UBUNTU-CVE-2022-25844

Affected: Ubuntu:Pro:20.04:LTS: angular.js, Ubuntu:22.04:LTS: angular.js, Ubuntu:24.04:LTS: angular.js

WID-SEC-W-2022-0507 — Angular: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Angular ausnutzen, um einen Denial of Service Angriff durchzuführen.