https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:26:07 +0000 https://cve.radiocsirt.org/vuln/cve-2025-2336 <p><strong>Affected:</strong> Google AngularJS</p> <p>Improper sanitization of the value of the &#39;href&#39; and &#39;xlink:href&#39; attributes in &#39;&lt;image&gt;&#39; SVG elements in AngularJS&#39;s &#39;ngSanitize&#39; module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing  and also negatively affect the application&#39;s performance and behavior by using too large or slow-to-load images.</p> <p>This issue affects AngularJS versions greater than or equal to 1.3.1.</p> <p>Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .</p> <p><strong>Affected:</strong> Google AngularJS</p> <p>Improper sanitization of the value of the &#39;href&#39; and &#39;xlink:href&#39; attributes in &#39;&lt;image&gt;&#39; SVG elements in AngularJS&#39;s &#39;ngSanitize&#39; module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing  and also negatively affect the application&#39;s performance and behavior by using too large or slow-to-load images.</p> <p>This issue affects AngularJS versions greater than or equal to 1.3.1.</p> <p>Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .</p> https://cve.radiocsirt.org/vuln/cve-2025-2336