org.webjars.bower:angular@1.7.3 vulnerabilities
-
latest version
1.8.3
-
first published
9 years ago
-
latest version published
2 years ago
-
licenses detected
- [1.0.7,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.bower:angular package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). A regular expression used to split the value of the Note: This package is EOL and will not receive any updates to address this issue. Users should migrate to @angular/core. How to fix Regular Expression Denial of Service (ReDoS)? There is no fixed version for |
[1.3.0,)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the How to fix Regular Expression Denial of Service (ReDoS)? There is no fixed version for |
[1.2.21,)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the How to fix Regular Expression Denial of Service (ReDoS)? There is no fixed version for |
[1.4.9,)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the How to fix Regular Expression Denial of Service (ReDoS)? There is no fixed version for |
[1.0.0,)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of How to fix Cross-site Scripting (XSS)? There is no fixed version for |
[0,)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in Note:
How to fix Regular Expression Denial of Service (ReDoS)? There is no fixed version for |
(1.7.0,)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to JQLite (DOM manipulation library that's part of AngularJS) manipulates input HTML before inserting it to the DOM in One of the modifications performed expands an XHTML self-closing tag. If PoC
Note that the style element is not closed and
This will alert, as How to fix Cross-site Scripting (XSS)? Upgrade |
[,1.8.0)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). The regex-based input HTML replacement may turn sanitized code into unsanitized one.
Wrapping How to fix Cross-site Scripting (XSS)? Upgrade |
[,1.8.0)
|
org.webjars.bower:angular is a bower WebJar for angular. Affected versions of this package are vulnerable to Prototype Pollution. The function How to fix Prototype Pollution? Upgrade |
[1.4.6,1.7.9)
|