Content Spoofing

angular is vulnerable to Content Spoofing. The vulnerability is caused by improper sanitization of the value of the srcset attribute. This allows attackers to bypass common image source restrictions, leading to a form of Content Spoofing...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3298 more potentially affected by CVE-2024-8373 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8373 Source advisory: OSV:GHSA-MQM9-C95H-X2P6...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3298 more potentially affected by CVE-2024-8373 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8373 Source advisory: GHSA-MQM9-C95H-X2P6...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3255 more potentially affected by CVE-2024-8372 via angular (>=1.3.2, <=1.8.3)

angular NPM version =1.3.2, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8372 Source advisory: OSV:GHSA-M9GF-397R-HWPG...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3255 more potentially affected by CVE-2024-8372 via angular (>=1.3.2, <=1.8.3)

angular NPM version =1.3.2, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8372 Source advisory: GHSA-M9GF-397R-HWPG...

hslayers-ng (>=0.4.1, <=0.5.4) potentially affected by CVE-2024-8373 via angular-loader (1.4.14)

angular-loader NPM version 1.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on angular-loader and may be impacted: - hslayers-ng =0.4.1, =0.5.4 Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

40au-isteven-angular-multiselect (4.0.0), @appirio/demo-scoped-pkg (>=2.4.1, <=2.8.0) +160 more potentially affected by CVE-2024-8373 via angular-mocks (>=1.6.1, <=1.8.3)

angular-mocks NPM version =1.6.1, =2.4.1, =0.2.3, =2.3.0, =1.0.0, =2.8.3-2, =0.0.7, =0.0.1-rc.1, =0.0.1-alpha.0, =1.0.0, =0.2.0, =42.0.0-beta.0, =53.0.1 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@b1cloud/angular-weekly-scheduler (>=0.0.8, <=0.0.13), @covisint/cui-i18n (>=1.0.3, <=1.0.20) +25 more potentially affected by CVE-2024-8373 via angular-i18n (>=1.6.1, <=1.8.3)

angular-i18n NPM version =1.6.1, =0.0.8, =1.0.3, =0.2.1, =1.0.0, =1.0.0, =5.3.0, =3.0.0, =0.5.0, =1.1.0, =1.0.3, =1.1.1 - angular-timepicker 1.0.11 - angular-weekly-scheduler 0.0.6 - easypage-editor 0.1.0 - gassman 1.0.0 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0), @nuskin/ns-agelocme-mobile (>=0.1.0, <=3.14.2) +28 more potentially affected by CVE-2024-8373 via angular-touch (>=1.4.5, <=1.5.11)

angular-touch NPM version =1.4.5, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.2, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@amitport/useful (>=0.5.0, <=0.5.2), @covisint/cui-idm-b2x (>=1.2.4, <=1.3.0) +58 more potentially affected by CVE-2024-8373 via angular-messages (>=1.3.20, <=1.5.11)

angular-messages NPM version =1.3.20, =0.5.0, =1.2.4, =0.2.0, =0.1.0, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.1, =1.0.0, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =0.10.4, =1.3.0, =0.0.8, =0.0.10, =1.1.9, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +93 more potentially affected by CVE-2024-8373 via angular-resource (>=1.3.15, <=1.5.11)

angular-resource NPM version =1.3.15, =0.2.7, =1.0.0, =1.0.1, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.34.67 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100) +397 more potentially affected by CVE-2024-8373 via angular-animate (>=1.6.1, <=1.8.3)

angular-animate NPM version =1.6.1, =4.13.7-rc4, =1.4.156, =1.0.3, =0.0.8, =0.0.1, =1.0.0, =0.2.1, =1.0.0, =3.2.26, =3.0.11, =3.0.1, =3.0.7, =3.2.18, =3.0.64, =4.5.0 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@bb-cli/bb-test-plugin-ngmock (1.5.8), @dbx/apx-lib (>=1.2.6, <=2.1.7) +80 more potentially affected by CVE-2024-8373 via angular-mocks (>=1.2.32, <=1.5.11)

angular-mocks NPM version =1.2.32, =1.2.6, =0.1.0, =1.0.4, =26.0.1, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.1.0, =0.1.0, =0.1.0, =3.14.2 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@w20/w20 (>=2.4.0, <=2.5.1), @w20/w20-bootstrap-2 (2.2.0) +15 more potentially affected by CVE-2024-8373 via angular-message-format (1.8.3)

angular-message-format NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-message-format and may be impacted: - @w20/w20 =2.4.0, =1.3.0, =2.3.0, =3.3.0, =2.2.0-rc.1, =1.3.0-rc.1, =2.2.0-rc.2, =2.2.0-rc.3 and more Source cves:...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +690 more potentially affected by CVE-2024-8373 via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@raptorjs/ng-portal (>=1.0.5, <=2.1.3), @umptor/slidedeck (2.1.1) +6 more potentially affected by CVE-2024-8373 via angular-loader (>=1.7.9, <=1.8.3)

angular-loader NPM version =1.7.9, =1.0.5, =2.0.7, =2.0.0, =2.4.0, =1.1.0, =1.8.2, =1.8.4 Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@ardimedia/angular-portal-azure (>=0.2.2-beta, <=0.2.346), @benningfield-group/bgi (>=0.1.1, <=0.5.0) +177 more potentially affected by CVE-2024-8373 via angular-resource (>=1.6.1, <=1.8.3)

angular-resource NPM version =1.6.1, =0.2.2-beta, =0.1.1, =1.0.0, =1.0.0, =1.0.3, =0.2.1, =1.0.1, =2.0.0, =1.0.0, =0.5.0, =1.0.5, =0.9.3, =0.1.0, =0.11.7 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +75 more potentially affected by CVE-2024-8373 via angular-cookies (>=1.2.27, <=1.5.11)

angular-cookies NPM version =1.2.27, =0.2.7, =1.0.0, =1.0.1, =1.2.6, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.14.2 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@covisint/cui-i18n (>=1.0.0, <=1.0.45), @covisint/cui-idm-b2x (>=1.0.1, <=1.3.0) +10 more potentially affected by CVE-2024-8373 via angular-i18n (>=1.2.32, <=1.5.11)

angular-i18n NPM version =1.2.32, =1.0.0, =1.0.1, =8.0.0, =0.0.1, =2.8.46, =2.8.16, =0.0.5, =1.0.0, =1.2.0, =1.24.0 Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...

@alancnet/material-framework (>=1.0.3, <=1.0.18), @alffiedev/alffie-components (>=1.0.0, <=1.0.13) +224 more potentially affected by CVE-2024-8373 via angular-messages (>=1.6.0, <=1.8.3)

angular-messages NPM version =1.6.0, =1.0.3, =1.0.0, =0.0.1, =0.2.1, =1.0.0-beta.2, =1.0.0, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.1, =1.4.3, =1.0.0, =1.0.0, =1.5.0 and more Source cves: CVE-2024-8373 Source advisory: MEND:CVE-2024-8373...