UBUNTU-CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

Design/Logic Flaw

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

UBUNTU-CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

@dankapusta/angular-bootstrap-calendar (0.20.1), @flagbit/ggm-components (0.9.11) +95 more potentially affected by CVE-2023-26116 via angular-touch (>=1.6.2, <=1.8.3)

angular-touch NPM version =1.6.2, =0.13.6, =0.1.0, =1.0.5, =3.0.0, =2.4.0, =1.3.0, =2.3.0, =2.3.2 - @w20/w20-dataviz 2.3.0 - @w20/w20-extras 2.3.0 - @w20/w20-material 2.2.0 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +690 more potentially affected by CVE-2023-26116 via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +2860 more potentially affected by CVE-2023-26116 via angular (>=1.6.0, <=1.8.3)

angular NPM version =1.6.0, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@raptorjs/ng-portal (>=1.0.5, <=2.1.3) potentially affected by CVE-2023-26116 via angular-parse-ext (1.8.3)

angular-parse-ext NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-parse-ext and may be impacted: - @raptorjs/ng-portal =1.0.5, =2.1.3 Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +93 more potentially affected by CVE-2023-26116 via angular-resource (>=1.3.15, <=1.5.11)

angular-resource NPM version =1.3.15, =0.2.7, =1.0.0, =1.0.1, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.34.67 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

40au-isteven-angular-multiselect (4.0.0), @appirio/demo-scoped-pkg (>=2.4.1, <=2.8.0) +160 more potentially affected by CVE-2023-26116 via angular-mocks (>=1.6.1, <=1.8.3)

angular-mocks NPM version =1.6.1, =2.4.1, =0.2.3, =2.3.0, =1.0.0, =2.8.3-2, =0.0.7, =0.0.1-rc.1, =0.0.1-alpha.0, =1.0.0, =0.2.0, =42.0.0-beta.0, =53.0.1 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

CVE-2023-26116

CVE-2023-26116 applies to AngularJS: versions of the angular package up to 1.2.21 are vulnerable to a Regular Expression Denial of Service via the angular.copy() function due to an insecure regex. Exploitation requires a large crafted input and can cause catastrophic backtracking, leading to deni...

@b1cloud/angular-weekly-scheduler (>=0.0.8, <=0.0.13), @covisint/cui-i18n (>=1.0.3, <=1.0.20) +25 more potentially affected by CVE-2023-26116 via angular-i18n (>=1.6.1, <=1.8.3)

angular-i18n NPM version =1.6.1, =0.0.8, =1.0.3, =0.2.1, =1.0.0, =1.0.0, =5.3.0, =3.0.0, =0.5.0, =1.1.0, =1.0.3, =1.1.1 - angular-timepicker 1.0.11 - angular-weekly-scheduler 0.0.6 - easypage-editor 0.1.0 - gassman 1.0.0 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@amitport/useful (>=0.5.0, <=0.5.2), @nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0) +84 more potentially affected by CVE-2023-26116 via angular-route (>=1.2.17-build.163.1, <=1.5.11)

angular-route NPM version =1.2.17-build.163.1, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.1.53 - @ohos-ports/nuskin-ns-agelocme-mobile 3.14.2-beta.0 - @ohos-ports/nuskin-ns-checkout-mobile 3.14.2-beta.0 - @openmrs/openmrs-contrib-uicommons...

CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

@alancnet/material-framework (>=1.0.3, <=1.0.18), @alffiedev/alffie-components (>=1.0.0, <=1.0.13) +224 more potentially affected by CVE-2023-26116 via angular-messages (>=1.6.0, <=1.8.3)

angular-messages NPM version =1.6.0, =1.0.3, =1.0.0, =0.0.1, =0.2.1, =1.0.0-beta.2, =1.0.0, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.1, =1.4.3, =1.0.0, =1.0.0, =1.5.0 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@nuskin/ns-agelocme-core (>=0.1.0, <=3.35.0), @nuskin/ns-agelocme-mobile (>=0.1.0, <=3.14.2) +28 more potentially affected by CVE-2023-26116 via angular-touch (>=1.4.5, <=1.5.11)

angular-touch NPM version =1.4.5, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.2, =0.0.1, =0.0.2 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@cobrowser/cb_services (>=0.2.7, <=1.1.17), @covisint/cui-i18n (>=1.0.0, <=1.0.45) +75 more potentially affected by CVE-2023-26116 via angular-cookies (>=1.2.27, <=1.5.11)

angular-cookies NPM version =1.2.27, =0.2.7, =1.0.0, =1.0.1, =1.2.6, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.14.2 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100) +139 more potentially affected by CVE-2023-26116 via angular-cookies (>=1.6.0, <=1.8.3)

angular-cookies NPM version =1.6.0, =4.13.7-rc4, =1.4.156, =0.2.108, =0.0.1, =0.0.15, =0.1.0, =1.0.3, =0.2.1, =4.11.0, =4.0.0, =4.10.0, =4.13.5-1, =5.3.0, =1.0.5, =2.1.3 and more Source cves: CVE-2023-26116 Source advisory: MEND:CVE-2023-26116...