p PatchFirst

CVE-2023-26116

CVE-2023-26116

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

CVSS 5.3 · Medium · EPSS 1.7% · Fix available

Published
Updated

Stack: system · node

Affected products and versions

  • angular

    Versions
    • ≥ 1.2.21: Affected (semver)

    No fix published

  • org.webjars.bower:angular

    Versions
    • ≥ 1.2.21: Affected (semver)

    No fix published

  • org.webjars.npm:angular

    Versions
    • ≥ 1.2.23: Affected (semver)

    No fix published

  • org.webjars.bowergithub.angular:angular

    Versions
    • ≥ 0: Affected (semver)

    No fix published

  • angular.js Debian:12

    Versions
    • 1.8.3-1
    • 1.8.3-1+deb12u1~deb11u1
    Affected ranges
    • ECOSYSTEM: < 1.8.3-1+deb12u1

    Update to 1.8.3-1+deb12u1

  • angular.js Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.8.3-2

    Update to 1.8.3-2

  • angular npm

    Affected ranges
    • SEMVER: ≤ 1.8.3

    No fix published

  • angular.js Ubuntu:Pro:16.04:LTS

    Versions
    • 1.2.28-1ubuntu2
    Affected ranges
    • ECOSYSTEM: < 1.2.28-1ubuntu2+esm1

    Update to 1.2.28-1ubuntu2+esm1

  • angular.js Ubuntu:Pro:18.04:LTS

    Versions
    • 1.5.10-1
    Affected ranges
    • ECOSYSTEM: < 1.5.10-1ubuntu0.1~esm1

    Update to 1.5.10-1ubuntu0.1~esm1

  • angular.js Ubuntu:Pro:20.04:LTS

    Versions
    • 1.5.10-1
    • 1.7.9-1
    Affected ranges
    • ECOSYSTEM: < 1.7.9-1ubuntu0.1~esm1

    Update to 1.7.9-1ubuntu0.1~esm1

  • angular.js Ubuntu:22.04:LTS

    Versions
    • 1.8.2-2
    Affected ranges
    • ECOSYSTEM: < 1.8.2-2ubuntu0.1

    Update to 1.8.2-2ubuntu0.1

  • angular.js Ubuntu:24.04:LTS

    Versions
    • 1.8.3-1
    Affected ranges
    • ECOSYSTEM: < 1.8.3-1ubuntu0.24.04.1

    Update to 1.8.3-1ubuntu0.24.04.1

Original sources

Check your server →