CVE-2021-21277

angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compileuserControlledInput" where "userControlledInput" is tex...

CVE-2020-5219

Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compileuserControlledInput where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker could run any browser script when the...

PT-2020-18315

Name of the Vulnerable Software and Affected Versions Angular Expressions versions prior to 1.0.1 Description The issue allows for remote code execution if expressions.compileuserControlledInput is called where userControlledInput is text from user input. In a browser environment, an attacker cou...