CVE-2024-21490

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

CVE-2024-21490

CVE-2024-21490 affects AngularJS ng-srcset handling. The vulnerability is a regular expression backtracking (ReDoS) in the ng-srcset split logic, exploitable via crafted input to trigger super-linear runtime and denial of service. Documents indicate affected versions are AngularJS 1.3.0 and later...

CVE-2024-21490

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

CVE-2024-21490

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +92 more potentially affected by CVE-2024-21490 via angular-resource (>=1.3.15, <=1.5.11)

angular-resource NPM version =1.3.15, =0.2.7, =1.0.0, =1.0.1, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.34.67 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@covisint/cui-i18n (>=1.0.0, <=1.0.45), @covisint/cui-idm-b2x (>=1.0.1, <=1.3.0) +10 more potentially affected by CVE-2024-21490 via angular-i18n (>=1.2.32, <=1.5.11)

angular-i18n NPM version =1.2.32, =1.0.0, =1.0.1, =8.0.0, =0.0.1, =2.8.46, =2.8.16, =0.0.5, =1.0.0, =1.2.0, =1.24.0 Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100), @alancnet/material-framework (>=1.0.3, <=1.0.18) +236 more potentially affected by CVE-2024-21490 via angular-aria (>=1.6.0, <=1.8.3)

angular-aria NPM version =1.6.0, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.0, =1.0.0, =5.3.0, =1.0.1, =0.0.1, =1.0.5, =0.9.3, =0.1.0, =0.1.0, =0.18.9 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +689 more potentially affected by CVE-2024-21490 via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

40au-isteven-angular-multiselect (4.0.0), @0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5) +407 more potentially affected by CVE-2024-21490 via angular-sanitize (>=1.6.0, <=1.8.3)

angular-sanitize NPM version =1.6.0, =4.13.7-rc4, =0.0.1, =0.0.1, =0.1.0, =2.0.0, =0.3.2, =1.0.0, =1.0.3, =0.2.1, =0.0.1, =1.0.0, =3.0.4, =4.16.5 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@raptorjs/ng-portal (>=1.0.5, <=2.1.3), @umptor/slidedeck (2.1.1) +6 more potentially affected by CVE-2024-21490 via angular-loader (>=1.7.9, <=1.8.3)

angular-loader NPM version =1.7.9, =1.0.5, =2.0.7, =2.0.0, =2.4.0, =1.1.0, =1.8.2, =1.8.4 Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +83 more potentially affected by CVE-2024-21490 via angular-route (>=1.2.17-build.163.1, <=1.5.11)

angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =8.0.0, =10.2.0 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

CVE-2024-21490

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

@ardimedia/angular-portal-azure (>=0.2.2-beta, <=0.2.346), @benningfield-group/bgi (>=0.1.1, <=0.5.0) +184 more potentially affected by CVE-2024-21490 via angular-resource (>=1.6.1, <=1.8.3)

angular-resource NPM version =1.6.1, =0.2.2-beta, =0.1.1, =1.0.0, =1.0.0, =1.0.3, =0.2.1, =1.0.1, =2.0.0, =1.0.0, =0.5.0, =1.0.5, =0.9.3, =0.1.0, =0.11.7 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@bb-cli/bb-test-plugin-ngmock (1.5.8), @dbx/apx-lib (>=1.2.6, <=2.1.7) +79 more potentially affected by CVE-2024-21490 via angular-mocks (>=1.2.32, <=1.5.11)

angular-mocks NPM version =1.2.32, =1.2.6, =0.1.0, =1.0.4, =26.0.1, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.1.0, =0.1.0, =0.1.0, =3.14.2 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0), @nuskin/ns-agelocme-mobile (>=0.1.0, <=3.14.2) +27 more potentially affected by CVE-2024-21490 via angular-touch (>=1.4.5, <=1.5.11)

angular-touch NPM version =1.4.5, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.2, =0.0.1, =1.1.9, =1.4.0 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

CVE-2024-21490: Inefficient Regular Expression Complexity

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

Angular Security Vulnerabilities

Angular is a development platform. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. A security vulnerability exists in Angular version 1.3.0. An attacker has exploited the vulnerability to cause a denial of service...

CVE-2024-22200

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0...

Design/Logic Flaw

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0...

CVE-2024-22200 vantage6-UI docker image leaks software version information

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0...