CVE-2026-11998高 7.6A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrar…
CVE-2025-0716中 4.8Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypa…
CVE-2024-8373中 4.3Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image …
CVE-2024-8372中 4.3Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which…
CVE-2024-21490高 7.5This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split th…