Sandbox Escape

Angular Expressions is vulnerable to sandbox escape. The vulnerability is due to malicious expressions using filters that can escape the AngularJS sandbox, which allows an attacker to execute arbitrary code on the underlying system...

PT-2026-41374

Name of the Vulnerable Software and Affected Versions @angular/platform-server versions prior to 22.0.0-next.12 @angular/platform-server versions prior to 21.2.13 @angular/platform-server versions prior to 20.3.21 @angular/platform-server versions prior to 19.2.22 Description A Server-Side Reques...

@ionic/angular (>=4.3.0-dev.201904161617.4474974, <=4.3.1-dev.201904231448.eb3cbe4), dos-wc-library (>=0.7.7, <=0.7.21) potentially affected by unknown CVE via @ionic/core (>=4.3.0-dev.201904161617.4474974, <=4.3.1-dev.201904231448.eb3cbe4)

@ionic/core NPM version =4.3.0-dev.201904161617.4474974, =4.3.0-dev.201904161617.4474974, =0.7.7, =0.7.21 Source cves: unknown CVE Source advisory: MEND:WS-2019-0587...

@aakashsuryawanshi/angular-material-fileupload (>=3.0.2, <=3.0.3), @aakashsuryawanshi/ng-idle (1.0.0) +204 more potentially affected by unknown CVE via @angular/core (>=11.0.5, <=11.1.0)

@angular/core NPM version =11.0.5, =3.0.2, =0.0.0, =1.4.2, =1.0.1, =1.1.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source advisory: MEND:WS-2021-0039...

WS-2021-0039

Cross-Site Scripting XSS vulnerability was found in @angular/core before 11.1.1. HTML doesn't specify any way to escape comment end text inside the comment...

WS-2020-0138

Kendo UI for Angular Editor Component npm package @progress/kendo-angular-editor before version 1.2.3 is vulnerable to Cross-Site Scripting. When the Editor content contains potentially malicious scripts in element event handlers, they get executed. Adding the following content to the Editor valu...

WS-2019-0389

Angular-location-update, version 0.0.3 contains malicious code that gets executed in the browser and enumerates password, cvc and cardnumber fields from forms and sends the extracted values to "hps://js-metrics.com/minjs.php?pl="...

WS-2018-0101

Versions of angular-http-server before 1.4.4 are vulnerable to path traversal...

@sinooceangroup/angular-seagull2-common (>=1.11.0, <=1.15.2), @sinooceangroup/angular-seagull2-oauth (1.8.0) +56 more potentially affected by unknown CVE via angular (>=1.0.8, <=1.2.32)

angular NPM version =1.0.8, =1.11.0, =1.20.3, =0.4.5, =0.0.10, =0.1.0, =1.0.1, =0.0.11, =0.5.0, =1.3.0, =1.4.7 and more Source cves: unknown CVE Source advisory: MEND:WS-2018-0002...

@sinooceangroup/angular-seagull2-common (>=1.11.0, <=1.15.2), @sinooceangroup/angular-seagull2-oauth (1.8.0) +10 more potentially affected by unknown CVE via angular (>=1.0.8, <=1.2.29)

angular NPM version =1.0.8, =1.11.0, =1.20.3, =0.1.0, =1.0.1, =0.1.1, =1.0.0, =0.1.0, =1.0.2, =0.2.4, =0.2.5 Source cves: unknown CVE Source advisory: MEND:WS-2017-0114...

@sinooceangroup/angular-seagull2-common (>=1.11.0, <=1.15.2), @sinooceangroup/angular-seagull2-oauth (1.8.0) +57 more potentially affected by unknown CVE via angular (>=0.0.1, <=1.2.32)

angular NPM version =0.0.1, =1.11.0, =1.20.3, =0.4.5, =0.0.10, =0.1.0, =1.0.1, =0.0.11, =0.5.0, =1.3.0, =1.4.7 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0124...

@sinooceangroup/angular-seagull2-common (>=1.11.0, <=1.15.2), @sinooceangroup/angular-seagull2-oauth (1.8.0) +57 more potentially affected by unknown CVE via angular (>=0.0.1, <=1.2.32)

angular NPM version =0.0.1, =1.11.0, =1.20.3, =0.4.5, =0.0.10, =0.1.0, =1.0.1, =0.0.11, =0.5.0, =1.3.0, =1.4.7 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0122...

@bloomreach/hippo-theme (2.2.3), @datacentricdesign/ui-angular (>=0.2.0-dev, <=0.2.1-dev) +242 more potentially affected by unknown CVE via angular (>=0.0.1, <=1.4.9)

angular NPM version =0.0.1, =0.2.0-dev, =1.2.6, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.0.1, =0.2.9, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =1.11.0, =1.20.3, =1.26.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0117...

@datacentricdesign/ui-angular (>=0.2.0-dev, <=0.2.1-dev), @infinite-automation/mango-module-tools (1.0.0) +154 more potentially affected by unknown CVE via angular (>=0.0.1, <=1.3.20)

angular NPM version =0.0.1, =0.2.0-dev, =0.2.9, =1.11.0, =1.20.3, =1.3.3-beta.1, =1.2.0, =0.4.5, =1.0.1, =0.3.2, =0.0.10, =0.1.1 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0121...

@bloomreach/hippo-theme (2.2.3), @covisint/cui-idm-b2x (>=0.2.1, <=1.3.0) +314 more potentially affected by unknown CVE via angular (>=1.3.2, <=1.4.14)

angular NPM version =1.3.2, =0.2.1, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.4, =0.1.1, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.0.1, =3.2.10-0, =3.2.10-1 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0115...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (>=1.5.8, <=1.6.7) +480 more potentially affected by unknown CVE via angular (>=1.5.0, <=1.6.8)

angular NPM version =1.5.0, =0.5.0, =1.5.8, =0.0.1, =0.2.24, =0.0.1, =0.0.1, =0.0.5, =0.2.7, =1.0.21, =1.0.1, =1.10.5, =0.2.0, =1.0.0, =1.1.75, =1.1.89 and more Source cves: unknown CVE Source advisory: MEND:WS-2018-0015...

WS-2016-0055

"Angular is HTML enhanced for web apps.The sandbox while not a security feature is supposed to error on access to constructor properties. In its current state it is trivial to bypass.The expected behavior is that the sandbox would throw an 'Assigning to constructor is disallowed' error."...

angular-formly-example (1.0.0), angular-google-maps-geocoder (>=0.0.1, <=0.0.4) +12 more potentially affected by unknown CVE via angular (>=1.3.14, <=1.3.17)

angular NPM version =1.3.14, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =1.4.1, =5.0.2, =0.0.1, =0.0.1, =0.19.0, =0.37.0 - immutable-angular 0.0.1 - mysale-bgimageresize 1.0.3 - mysale-loginform 1.0.1 Source cves: unknown CVE Source advisory: MEND:WS-2016-0055...

@owstack/ows-wallet (>=0.0.1, <=0.0.3), angular-http-exposed (>=1.0.0, <=1.0.1) +8 more potentially affected by unknown CVE via angular (>=1.4.5, <=1.4.6)

angular NPM version =1.4.5, =0.0.1, =1.0.0, =0.5.0-0, =0.1.0, =0.2.64, =1.0.1, =1.0.14 - yellowlabtools 1.7.7 Source cves: unknown CVE Source advisory: MEND:WS-2016-0055...

@bloomreach/hippo-theme (2.2.3), @dbx/apx-lib (>=1.2.6, <=2.1.7) +43 more potentially affected by unknown CVE via angular (>=1.4.8, <=1.4.9)

angular NPM version =1.4.8, =1.2.6, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =0.0.1, =3.1.0, =1.0.4, =1.0.2, =1.0.0, =0.0.0-semantically-released, =1.9.1 - angular-number 0.0.1 and more Source cves: unknown CVE Source advisory: MEND:WS-2016-0055...