AngularJS 安全漏洞

AngularJS is an open source web application framework based on TypeScript. A security vulnerability exists in AngularJS version 1.7.0 and above, which stems from the fact that it provides a customized zone rule that can be used to assign a parameter in posPre, which can be exploited by an attacke...

CVE-2022-25844: Inefficient Regular Expression Complexity

The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service ReDoS by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat of NUMBERFORMATS.PATTERNS1.posPre with a very high value. Note: 1 This package has been deprecated an...