40au-isteven-angular-multiselect (4.0.0), @0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5) +407 more potentially affected by CVE-2023-26117 via angular-sanitize (>=1.6.0, <=1.8.3)

angular-sanitize NPM version =1.6.0, =4.13.7-rc4, =0.0.1, =0.0.1, =0.1.0, =2.0.0, =0.3.2, =1.0.0, =1.0.3, =0.2.1, =0.0.1, =1.0.0, =3.0.4, =4.16.5 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100) +405 more potentially affected by CVE-2023-26117 via angular-animate (>=1.6.1, <=1.8.3)

angular-animate NPM version =1.6.1, =4.13.7-rc4, =1.4.156, =1.0.3, =0.0.8, =0.0.1, =1.0.0, =0.2.1, =1.0.0, =3.2.26, =3.0.11, =3.0.1, =3.0.7, =3.2.18, =3.0.64, =4.5.0 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @alancnet/material-framework (>=1.0.3, <=1.0.18) +222 more potentially affected by CVE-2023-26117 via angular-route (>=1.6.1, <=1.8.3)

angular-route NPM version =1.6.1, =4.13.7-rc4, =1.0.3, =0.0.15, =0.0.7, =0.1.0, =1.0.0, =1.4.0, =0.0.5, =0.4.47, =1.0.0, =3.1.0, =3.0.11, =3.0.1, =3.0.3 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +83 more potentially affected by CVE-2023-26117 via angular-route (>=1.2.17-build.163.1, <=1.5.11)

angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =8.0.0, =10.2.0 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

CVE-2023-26117

CVE-2023-26117 affects angular.js: ReDoS via the $resource service caused by an insecure regular expression. Affected: angular.js versions starting at 1.0.0 (as cited). Potential impact is denial of service under large, crafted inputs due to catastrophic backtracking. Remediation details present ...

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100) +146 more potentially affected by CVE-2023-26117 via angular-cookies (>=1.6.0, <=1.8.3)

angular-cookies NPM version =1.6.0, =4.13.7-rc4, =1.4.156, =0.2.108, =0.0.1, =0.0.15, =0.1.0, =1.0.3, =0.2.1, =4.11.0, =4.0.0, =4.10.0, =4.13.5-1, =5.3.0, =1.0.5, =2.1.3 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

hslayers-ng (>=0.4.1, <=0.5.4) potentially affected by CVE-2023-26117 via angular-loader (1.4.14)

angular-loader NPM version 1.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on angular-loader and may be impacted: - hslayers-ng =0.4.1, =0.5.4 Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +152 more potentially affected by CVE-2023-26117 via angular-sanitize (>=1.2.27, <=1.5.11)

angular-sanitize NPM version =1.2.27, =0.2.7, =1.0.0, =1.0.1, =1.0.0, =3.0.2, =3.0.11, =3.0.1, =3.0.7, =3.2.17, =3.0.62, =3.0.0, =3.0.1, =3.0.6, =1.0.0, =1.4.3 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@raptorjs/ng-portal (>=1.0.5, <=2.1.3), @umptor/slidedeck (2.1.1) +6 more potentially affected by CVE-2023-26117 via angular-loader (>=1.7.9, <=1.8.3)

angular-loader NPM version =1.7.9, =1.0.5, =2.0.7, =2.0.0, =2.4.0, =1.1.0, =1.8.2, =1.8.4 Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@dankapusta/angular-bootstrap-calendar (0.20.1), @flagbit/ggm-components (0.9.11) +95 more potentially affected by CVE-2023-26117 via angular-touch (>=1.6.2, <=1.8.3)

angular-touch NPM version =1.6.2, =0.13.6, =0.1.0, =1.0.5, =3.0.0, =2.4.0, =1.3.0, =2.3.0, =2.3.2 - @w20/w20-dataviz 2.3.0 - @w20/w20-extras 2.3.0 - @w20/w20-material 2.2.0 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +689 more potentially affected by CVE-2023-26117 via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@amitport/useful (>=0.5.0, <=0.5.2), @bloomreach/hippo-theme (2.2.3) +147 more potentially affected by CVE-2023-26117 via angular-animate (>=1.2.32, <=1.5.11)

angular-animate NPM version =1.2.32, =0.5.0, =1.2.1, =1.0.0, =1.0.0, =3.2.13, =3.0.11, =3.0.1, =3.0.7, =3.2.17, =3.0.62, =3.0.0, =3.0.1, =3.3.1 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100), @alancnet/material-framework (>=1.0.3, <=1.0.18) +236 more potentially affected by CVE-2023-26117 via angular-aria (>=1.6.0, <=1.8.3)

angular-aria NPM version =1.6.0, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.0, =1.0.0, =5.3.0, =1.0.1, =0.0.1, =1.0.5, =0.9.3, =0.1.0, =0.1.0, =0.18.9 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@raptorjs/ng-portal (>=1.0.5, <=2.1.3) potentially affected by CVE-2023-26117 via angular-parse-ext (1.8.3)

angular-parse-ext NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-parse-ext and may be impacted: - @raptorjs/ng-portal =1.0.5, =2.1.3 Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +2868 more potentially affected by CVE-2023-26117 via angular (>=1.6.0, <=1.8.3)

angular NPM version =1.6.0, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

@amitport/useful (>=0.5.0, <=0.5.2), @covisint/cui-idm-b2x (>=1.2.4, <=1.3.0) +58 more potentially affected by CVE-2023-26117 via angular-messages (>=1.3.20, <=1.5.11)

angular-messages NPM version =1.3.20, =0.5.0, =1.2.4, =0.2.0, =0.1.0, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.1, =1.0.0, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =0.10.4, =1.3.0, =0.0.8, =0.0.10, =1.1.9, =0.0.1, =0.0.2 and more Source cves: CVE-2023-26117 Source advisory: MEND:CVE-2023-26117...

CVE-2023-26116: Inefficient Regular Expression Complexity

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...