CVE-2023-26117

🗓️ 30 Mar 2023 05:15:07Reported by [email protected]Type

Vulnerability in angular package $resource service due to insecure regex

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to cross site scripting and denial of service via regular expressions in Grafana	27 Jun 202519:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM Security Verify Information Queue	10 Sep 202517:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple Angular JS vulnerabilities.	9 Aug 202321:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple AngularJS vulnerabilities	9 Aug 202316:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Angular vulnerabilities affects IBM Tivoli Business Service Manager (CVE-2023-26116, CVE-2023-26117, CVE-2023-26118, CVE-2022-25869, CVE-2022-25844)	5 Sep 202315:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation Fixes for May 2024.	15 Apr 202502:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in AngularJS shipped with IBM Tivoli Netcool Impact	30 Sep 202304:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in angular.js affect IBM Business Automation Workflow.	3 Jun 202413:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to the Angular JS (CVE-2023-26116, CVE-2023-26117, CVE-2023-26118)	30 Jun 202314:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Angular	26 Jul 202320:10	–	ibm

NVD

Node

angularjs angularjsRange1.0.0–1.8.3

Node

fedoraproject fedoraMatch38

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2025/07/msg00005.html
stackblitz	www.stackblitz.com/edit/angularjs-vulnerability-resource-trailing-slashes-redos
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/
security	www.security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406324
security	www.security.snyk.io/vuln/SNYK-JS-ANGULAR-3373045
security	www.security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406323
security	www.security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406325
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/

20 Nov 2025 17:53Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.3

EPSS0.00318

CWE-1333