hslayers-ng (>=0.4.1, <=0.5.4) potentially affected by CVE-2023-26116 via angular-loader (1.4.14)

angular-loader NPM version 1.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on angular-loader and may be impacted: - hslayers-ng =0.4.1, =0.5.4 Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@covisint/cui-i18n (>=1.0.0, <=1.0.45), @covisint/cui-idm-b2x (>=1.0.1, <=1.3.0) +10 more potentially affected by CVE-2023-26116 via angular-i18n (>=1.2.32, <=1.5.11)

angular-i18n NPM version =1.2.32, =1.0.0, =1.0.1, =8.0.0, =0.0.1, =2.8.46, =2.8.16, =0.0.5, =1.0.0, =1.2.0, =1.24.0 Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100), @alancnet/material-framework (>=1.0.3, <=1.0.18) +229 more potentially affected by CVE-2023-26116 via angular-aria (>=1.6.0, <=1.8.3)

angular-aria NPM version =1.6.0, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.0, =1.0.0, =5.3.0, =1.0.1, =0.0.1, =1.0.5, =0.9.3, =0.1.0, =0.1.0, =0.18.9 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@w20/w20 (>=2.4.0, <=2.5.1), @w20/w20-bootstrap-2 (2.2.0) +15 more potentially affected by CVE-2023-26116 via angular-message-format (1.8.3)

angular-message-format NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-message-format and may be impacted: - @w20/w20 =2.4.0, =1.3.0, =2.3.0, =3.3.0, =2.2.0-rc.1, =1.3.0-rc.1, =2.2.0-rc.2, =2.2.0-rc.3 and more Source cves:...

CVE-2023-26116

CVE-2023-26116 applies to AngularJS: versions of the angular package up to 1.2.21 are vulnerable to a Regular Expression Denial of Service via the angular.copy() function due to an insecure regex. Exploitation requires a large crafted input and can cause catastrophic backtracking, leading to deni...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +93 more potentially affected by CVE-2023-26116 via angular-resource (>=1.3.15, <=1.5.11)

angular-resource NPM version =1.3.15, =0.2.7, =1.0.0, =1.0.1, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.34.67 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +84 more potentially affected by CVE-2023-26116 via angular-route (>=1.2.17-build.163.1, <=1.5.11)

angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.1.53 - @ohos-ports/nuskin-ns-agelocme-mobile 3.14.2-beta.0 - @ohos-ports/nuskin-ns-checkout-mobile 3.14.2-beta.0 - @openmrs/openmrs-contrib-uicommons...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +153 more potentially affected by CVE-2023-26116 via angular-sanitize (>=1.2.27, <=1.5.11)

angular-sanitize NPM version =1.2.27, =0.2.7, =1.0.0, =1.0.1, =1.0.0, =3.0.2, =3.0.11, =3.0.1, =3.0.7, =3.2.17, =3.0.62, =3.0.0, =3.0.1, =3.0.6, =1.0.0, =1.4.3 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@bb-cli/bb-test-plugin-ngmock (1.5.8), @dbx/apx-lib (>=1.2.6, <=2.1.7) +80 more potentially affected by CVE-2023-26116 via angular-mocks (>=1.2.32, <=1.5.11)

angular-mocks NPM version =1.2.32, =1.2.6, =0.1.0, =1.0.4, =26.0.1, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.1.0, =0.1.0, =0.1.0, =3.14.2 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @alancnet/material-framework (>=1.0.3, <=1.0.18) +222 more potentially affected by CVE-2023-26116 via angular-route (>=1.6.1, <=1.8.3)

angular-route NPM version =1.6.1, =4.13.7-rc4, =1.0.3, =0.0.15, =0.0.7, =0.1.0, =1.0.0, =1.4.0, =0.0.5, =0.4.47, =1.0.0, =3.1.0, =3.0.11, =3.0.1, =3.0.3 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@raptorjs/ng-portal (>=1.0.5, <=2.1.3) potentially affected by CVE-2023-26116 via angular-parse-ext (1.8.3)

angular-parse-ext NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-parse-ext and may be impacted: - @raptorjs/ng-portal =1.0.5, =2.1.3 Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +690 more potentially affected by CVE-2023-26116 via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +75 more potentially affected by CVE-2023-26116 via angular-cookies (>=1.2.27, <=1.5.11)

angular-cookies NPM version =1.2.27, =0.2.7, =1.0.0, =1.0.1, =1.2.6, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.14.2 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100) +397 more potentially affected by CVE-2023-26116 via angular-animate (>=1.6.1, <=1.8.3)

angular-animate NPM version =1.6.1, =4.13.7-rc4, =1.4.156, =1.0.3, =0.0.8, =0.0.1, =1.0.0, =0.2.1, =1.0.0, =3.2.26, =3.0.11, =3.0.1, =3.0.7, =3.2.18, =3.0.64, =4.5.0 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@alancnet/material-framework (>=1.0.3, <=1.0.18), @alffiedev/alffie-components (>=1.0.0, <=1.0.13) +224 more potentially affected by CVE-2023-26116 via angular-messages (>=1.6.0, <=1.8.3)

angular-messages NPM version =1.6.0, =1.0.3, =1.0.0, =0.0.1, =0.2.1, =1.0.0-beta.2, =1.0.0, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.1, =1.4.3, =1.0.0, =1.0.0, =1.5.0 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

40au-isteven-angular-multiselect (4.0.0), @appirio/demo-scoped-pkg (>=2.4.1, <=2.8.0) +160 more potentially affected by CVE-2023-26116 via angular-mocks (>=1.6.1, <=1.8.3)

angular-mocks NPM version =1.6.1, =2.4.1, =0.2.3, =2.3.0, =1.0.0, =2.8.3-2, =0.0.7, =0.0.1-rc.1, =0.0.1-alpha.0, =1.0.0, =0.2.0, =42.0.0-beta.0, =53.0.1 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@dankapusta/angular-bootstrap-calendar (0.20.1), @flagbit/ggm-components (0.9.11) +95 more potentially affected by CVE-2023-26116 via angular-touch (>=1.6.2, <=1.8.3)

angular-touch NPM version =1.6.2, =0.13.6, =0.1.0, =1.0.5, =3.0.0, =2.4.0, =1.3.0, =2.3.0, =2.3.2 - @w20/w20-dataviz 2.3.0 - @w20/w20-extras 2.3.0 - @w20/w20-material 2.2.0 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...