| CVE-2026-11998 |
A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs…
|
7.6
High
|
Jun 24, 2026 |
| CVE-2025-4690 |
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to…
|
4.3
Medium
|
Aug 19, 2025 |
| CVE-2025-2336 |
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in…
|
4.8
Medium
|
Jun 4, 2025 |
| CVE-2025-0716 |
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS allows…
|
4.8
Medium
|
Apr 29, 2025 |
| CVE-2024-8373 |
Improper sanitization of the value of the [srcset] attribute in HTML elements in AngularJS allows attackers to bypass…
|
4.8
Medium
|
Sep 9, 2024 |
| CVE-2024-8372 |
Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source…
|
4.8
Medium
|
Sep 9, 2024 |