Lucene search
K

13 matches found

BDU FSTEC
BDU FSTEC
added 2024/06/03 12:0 a.m.0 views

The vulnerability of the ng-srcset component in the application design and development environment for Angular applications allows attackers to trigger a service failure.

The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.8CVSS0.02307EPSS
Exploits1References8Affected Software7
Veracode
Veracode
added 2024/03/29 6:54 a.m.46 views

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression backtracking in the ng-srcset directive. This potentially leads to Regular Expression Denial of Service ReDoS...

7.5CVSS6.6AI score0.02307EPSS
Exploits1References3Affected Software2
SUSE CVE
SUSE CVE
added 2024/02/27 3:55 a.m.1 views

SUSE CVE-2024-21490

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of servic...

7.5CVSS6.8AI score0.02307EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2024/02/14 9:31 p.m.92 views

CVE-2024-21490

An Inefficient Regular Expression Complexity vulnerability was found in NodeJS Angular. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking, leading to denial of service. Mitigation Mitigation for this issue is either n...

7.5CVSS7.2AI score0.02307EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2024/02/10 6:30 a.m.76 views

angular vulnerable to super-linear runtime due to backtracking

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of...

7.5CVSS6.9AI score0.02307EPSS
Exploits1References8Affected Software3
OSV
OSV
added 2024/02/10 6:30 a.m.1 views

GHSA-4W4V-5HC9-XRR2 angular vulnerable to super-linear runtime due to backtracking

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of...

7.5CVSS7.2AI score0.02307EPSS
Exploits1References8
OSV
OSV
added 2024/02/10 5:15 a.m.1 views

DEBIAN-CVE-2024-21490

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of servic...

7.5CVSS6.8AI score0.02307EPSS
Exploits1References1
OSV
OSV
added 2024/02/10 5:15 a.m.25 views

CVE-2024-21490

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of servic...

7.5CVSS7.3AI score0.02307EPSS
Exploits1References6
NVD
NVD
added 2024/02/10 5:15 a.m.19 views

CVE-2024-21490

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of servic...

7.5CVSS7.3AI score0.02307EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2024/02/10 5:15 a.m.25 views

CVE-2024-21490

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of servic...

7.5CVSS6.8AI score0.02307EPSS
Exploits1References4
Snyk
Snyk
added 2023/11/28 10:19 a.m.3 views

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

7.5CVSS5.9AI score0.02307EPSS
Exploits1References2
Snyk
Snyk
added 2023/11/28 10:19 a.m.6 views

Regular Expression Denial of Service (ReDoS)

Overview angular is a package that lets you write client-side web applications as if you had a smarter browser. It also lets you use HTML as your template language and lets you extend HTML’s syntax to express your application’s components clearly and succinctly. Affected versions of this package...

7.5CVSS6.6AI score0.02307EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/11/28 12:0 a.m.2 views

PT-2023-9165

Name of the Vulnerable Software and Affected Versions angular versions 1.3.0 and later Description A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic...

7.8CVSS6.8AI score0.02307EPSS
Exploits8References38
Rows per page
Query Builder