NVD Listing: NVD - CVE-2020-7676

Bug Fixes 

• This release provides fixes for two vulnerabilities cherry-picked from AngularJS version 1.8.x 
• Medium severity CVE-2020-7676  
• High severity CWE-79 
• Fix for CVE-2020-7676 addresses cross-site scripting (XSS) where the regex-based input HTML replacement may turn sanitized code into unsanitized code. 
• Fix for CWE-79 provides a solution while using JqLite to prevent a possible high-severity cross-site scripting (XSS) vulnerability due to regex-based HTML replacement. 
• Note that this patch is only for JqLite and not for JQuery, for more information about workarounds for JQuery consult the JQuery upgrade guide. 

SNYK Listing: Cross-site Scripting (XSS) in angular | Snyk

Bug Fixes 

• This release provides fixes for two vulnerabilities cherry-picked from AngularJS version 1.8.x 
• Medium severity CVE-2020-7676  
• High severity CWE-79 
• Fix for CVE-2020-7676 addresses cross-site scripting (XSS) where the regex-based input HTML replacement may turn sanitized code into unsanitized code. 
• Fix for CWE-79 provides a solution while using JqLite to prevent a possible high-severity cross-site scripting (XSS) vulnerability due to regex-based HTML replacement. 
• Note that this patch is only for JqLite and not for JQuery, for more information about workarounds for JQuery consult the JQuery upgrade guide. 

NVD Listing: NVD - CVE-2023-26118

Bug Fixes 

• angular.copy(): Fixed ReDoS issue in angular.copy()  
• This fix corrected the logic for copying RegExp in angular.copy and solved a high severity threat related to ReDoS (CVE-2023-26116) 
• $resource: Fixed ReDoS issue with URLs that have trailing slashes  
• Addressed the ReDoS high severity vulnerability (CVE-2023-26117). This fix resolved the trailing slashes issue in $resource.  
• input[url]: Fixed ReDoS issue in input URL 
• This fix addressed a high severity threat related to ReDoS and improves performance in URL_REGEXP (CVE-2023-26118) 

NVD Listing: NVD - CVE-2023-26118

Bug Fixes 

• angular.copy(): Fixed ReDoS issue in angular.copy()  
• This fix corrected the logic for copying RegExp in angular.copy and solved a high severity threat related to ReDoS (CVE-2023-26116) 
• $resource: Fixed ReDoS issue with URLs that have trailing slashes  
• Addressed the ReDoS high severity vulnerability (CVE-2023-26117). This fix resolved the trailing slashes issue in $resource.  
• input[url]: Fixed ReDoS issue in input URL 
• This fix addressed a high severity threat related to ReDoS and improves performance in URL_REGEXP (CVE-2023-26118) 

NVD Listing: NVD - CVE-2023-26117

Bug Fixes 

• angular.copy(): Fixed ReDoS issue in angular.copy()  
• This fix corrected the logic for copying RegExp in angular.copy and solved a high severity threat related to ReDoS (CVE-2023-26116) 
• $resource: Fixed ReDoS issue with URLs that have trailing slashes  
• Addressed the ReDoS high severity vulnerability (CVE-2023-26117). This fix resolved the trailing slashes issue in $resource.  
• input[url]: Fixed ReDoS issue in input URL 
• This fix addressed a high severity threat related to ReDoS and improves performance in URL_REGEXP (CVE-2023-26118) 

NVD Listing:- NVD - CVE-2022-25844

Bug Fixes 

• $filter: Fixed ReDoS issue in currencyFilter 
• Fixed a medium severity Regular Expression Denial of Service (ReDos) issue with currencyFilter (CVE-2022-25844). 

NVD Listing:- NVD - CVE-2022-25869

Bug Fixes  

• Fixed IE textarea value interpolation is omitted when reloading and using the browser back/forward functionality. 
• Fixed a medium severity cross-site scripting (XSS) vulnerability due to insecure page catching in the Internet Explorer (IE) browser. If your users are not using IE, this CVE is not exploitable (CVE-2022-25869).