Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:angularjs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductAngularjs (0fe79d01-cac3-5d5d-82f5-8c7d8b1ba9b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25869 vulnerable 2026-06-08 05:41:49.596085 Details available
MEDIUM (4.2)
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <textarea> elements.
Published: 2022-07-15T20:02:02.727Z
Updated: 2025-07-28T09:59:04.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10768 vulnerable 2026-06-08 05:12:25.258410 Details available
In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.
Published: 2019-11-19T20:07:49.000Z
Updated: 2024-08-04T22:32:01.679Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.