CVE-2026-44643
CVE-2026-44643 · Angular Expressions - Remote Code Execution using filters
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.
CVSS 9.3 · Critical · EPSS 0.5% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
angular-expressions
- Versions
- < 1.5.2: Affected
No fix published
angular-expressions npm
- Affected ranges
- SEMVER: < 1.5.2
Update to 1.5.2