WS-2017-0114

angular.js lacks $sce context for linkhref which makes it vulnerable to XSS attacks...

WS-2017-0115

angular.js doesn't sanitize a url attribute usemap causing a potential XSS vulnerability...

EUVD-2020-0499

Malware in sbrugna...

EUVD-2023-0653

Malicious code in bioql PyPI...

Security Bulletin: Vulnerabilities in Node.js, Angular.js, Golang Go, Java, MongoDB, Linux kernel may affect IBM Spectrum Protect Plus

Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in Node.js, Angular.js, Golang Go, Java, MongoDB Linux. Vulnerabilities include obtaining sensitive information, causing a denial of service condition, remote execution of arbitrary code on the system, and bypassing security...

Debian: Security Advisory (DLA-4242-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4242 : libjs-angularjs - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4242 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4242-1 [email protected]...

DLA-4242-1 angular.js - security update

Bulletin has no description...

[SECURITY] [DLA 4242-1] angular.js security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4242-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès July 20, 2025 https://wiki.debian.org/LTS -...

PT-2024-9452

Name of the Vulnerable Software and Affected Versions: Angular Expressions versions prior to 1.4.3 Description: The issue is related to the incorrect management of code generation in the Angular Expressions module for the Angular.JS web framework. An attacker can write a malicious expression that...

textAngular Cross-site Scripting vulnerability

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

CVE-2021-32854

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

CVE-2021-32854

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

Cross site scripting

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

CVE-2021-32854 textAngular text editor vulnerable to Cross-site Scripting

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

CVE-2021-32854

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

CVE-2021-32854

The CVE-2021-32854 issue affects textAngular (Angular.js) versions 1.5.16 and earlier, due to a copy-paste cross-site scripting (XSS) flaw in the editor. The root cause is an XSS vulnerability triggered when a user pastes malicious payloads into the text editor. No patched versions are identified...

PT-2023-12186 · Unknown · Textangular

Name of the Vulnerable Software and Affected Versions: textAngular versions 1.5.16 and prior Description: The issue is related to copy-paste cross-site scripting XSS in textAngular, a text editor for Angular.js. For this particular type of XSS, the victim needs to be fooled into copying a malicio...

CVE-2021-32854: Improper Neutralization of Input During Web Page Generation

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

Security Bulletin: IBM Guardium Data Encryption is vulnerable to cross-site scripting (CVE-2020-7676)

Summary A vulnerability to cross-site scripting exists in angular.js which is used in IBM Guardium Data Encryption GDE. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2020-7676 DESCRIPTION: angular.js is vulnerable to cross-site scripting, caused by improper...