MAL-2026-7176 Malicious code in angulorjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulerjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulatjs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7156 Malicious code in angulatjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulaljs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulaejs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angukarjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angujarjs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7117 Malicious code in anguearjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in amgularjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ajgularjs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7108 Malicious code in aigularjs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7105 Malicious code in aangularjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aangularjs (npm)

--- -= Per source details. Do not edit below this line.=-...

GeoNetwork has reflected XSS through client-side template injection

Summary It is possible to craft a URL that causes GeoNetwork to reflect attacker-controlled content into an error page in a way that gets evaluated as a client-side template expression. Combined with known AngularJS sandbox-escape techniques, this can be used to execute arbitrary JavaScript in th...

GHSA-2V4M-FW6C-G78F GeoNetwork has reflected XSS through client-side template injection

Summary It is possible to craft a URL that causes GeoNetwork to reflect attacker-controlled content into an error page in a way that gets evaluated as a client-side template expression. Combined with known AngularJS sandbox-escape techniques, this can be used to execute arbitrary JavaScript in th...

Linux Distros Unpatched Vulnerability : CVE-2026-11998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution...

CVE-2026-11998

A flaw was found in AngularJS. The Strict Contextual Escaping SCE logic, designed to ensure only trusted values are used in security-sensitive contexts like resource URLs, can be bypassed. This bypass allows an attacker to use unsafe values as resource URLs, leading to arbitrary JavaScript...

GHSA-7X27-G8RG-X87W Angular's deprecated package has a Cross-Site Scripting issue

A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...

Angular's deprecated package has a Cross-Site Scripting issue

A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...