CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

PT-2024-25422 · Unknown · Angular-Translate

Name of the Vulnerable Software and Affected Versions: angular-translate versions through 2.19.1 Description: The issue allows for XSS attacks via a crafted key used by the translate directive. The vendor notes that there is no documentation indicating a key is supposed to be safe against XSS...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

CVE-2024-33665: Improper Neutralization of Input During Web Page Generation

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

Angular-translate Cross-site Scripting Vulnerability

angular-translate is an AngularJS module in the angular-translate open source. A cross-site scripting vulnerability exists in Angular-translate version 2.19.1 and earlier, which stems from allowing cross-site scripting attacks via a crafted key used by the Translate command...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

@angular-devkit/build-angular (>=17.1.0-next.1, <=18.0.0-next.1), @directus/api (>=15.0.0, <=19.0.2) +42 more potentially affected by CVE-2024-30260 via undici (>=6.0.0, <=6.10.2)

undici NPM version =6.0.0, =17.1.0-next.1, =15.0.0, =10.0.15, =1.0.7, =2.0.3-dev.1707221040-ae57d7fac, =2.3.0-dev.1707221040-ae57d7fac, =9.0.0-next.34, =17.2.4-snapshot-1710342685688, =17.2.4-snapshot-1710342685688, =0.0.0-nightly-20240325-3d2380c, =1.0.0, =1.0.0, =15.0.0-dev.1711510274-f1f69dafa...

@angular-devkit/build-angular (>=17.1.0-next.1, <=18.0.0-next.1), @directus/api (>=15.0.0, <=19.0.2) +42 more potentially affected by CVE-2024-30260 via undici (>=6.0.0, <=6.10.2)

undici NPM version =6.0.0, =17.1.0-next.1, =15.0.0, =10.0.15, =1.0.7, =2.0.3-dev.1707221040-ae57d7fac, =2.3.0-dev.1707221040-ae57d7fac, =9.0.0-next.34, =17.2.4-snapshot-1710342685688, =17.2.4-snapshot-1710342685688, =0.0.0-nightly-20240325-3d2380c, =1.0.0, =1.0.0, =15.0.0-dev.1711510274-f1f69dafa...

@angular-devkit/build-angular (>=17.3.0-rc.0, <=17.3.3), @bebasebuild/basebuild (>=2.0.0-beta.0, <=2.0.0-beta.2) +56 more potentially affected by CVE-2024-31207 via vite (>=5.1.0, <=5.1.6)

vite NPM version =5.1.0, =17.3.0-rc.0, =2.0.0-beta.0, =1.0.8, =17.3.0-snapshot-1710756594967, =17.3.0-snapshot-1710756594967, =0.0.0-52469075, =0.0.0-52469075, =0.0.0-52469075, =6.0.12, =6.0.13, =6.0.13, =6.0.13, =6.0.13, =6.0.25 and more Source cves: CVE-2024-31207 Source advisory:...

@angular-devkit/build-angular (18.0.0-next.0), @eui/deps-base (>=18.0.0-next.1, <=18.0.0-next.2) +10 more potentially affected by CVE-2024-31207 via vite (>=5.2.0, <=5.2.4)

vite NPM version =5.2.0, =18.0.0-next.1, =18.0.0-next.1, =1.0.2, =0.0.39, =1.1.3, =1.1.9, =0.1.3, =0.20.0-beta.3, =0.20.0 Source cves: CVE-2024-31207 Source advisory: GHSA-8JHW-289H-JH2G...

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression backtracking in the ng-srcset directive. This potentially leads to Regular Expression Denial of Service ReDoS...

SUSE CVE-2024-21490

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), org.webjars.npm:github-com-showdownjs-ng-showdown (1.1.0) +3 more potentially affected by CVE-2024-1899 via org.webjars.npm:showdown (>=1.9.1, <=2.1.0)

org.webjars.npm:showdown MAVEN version =1.9.1, =2.0.0, =1.0.2, =1.0.3 - org.webjars.npm:showdown-prism 0.2.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-8685132...

@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24758 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24758 Source advisory: MEND:CVE-2024-24758...

@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24758 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24758 Source advisory: GHSA-3787-6PRV-H9W3...

@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24758 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24758 Source advisory: OSV:GHSA-3787-6PRV-H9W3...

@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24750 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24750 Source advisory: GHSA-9F24-JQHM-JFCW...

CVE-2024-21490

An Inefficient Regular Expression Complexity vulnerability was found in NodeJS Angular. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking, leading to denial of service. Mitigation Mitigation for this issue is either n...