NVD Listing: NVD - CVE-2023-26117

Bug Fixes 

• angular.copy(): Fixed ReDoS issue in angular.copy()  
• This fix corrected the logic for copying RegExp in angular.copy and solved a high severity threat related to ReDoS (CVE-2023-26116) 
• $resource: Fixed ReDoS issue with URLs that have trailing slashes  
• Addressed the ReDoS high severity vulnerability (CVE-2023-26117). This fix resolved the trailing slashes issue in $resource.  
• input[url]: Fixed ReDoS issue in input URL 
• This fix addressed a high severity threat related to ReDoS and improves performance in URL_REGEXP (CVE-2023-26118) 

NVD Listing : NVD - CVE-2023-26117

Bug Fixes 

• angular.copy(): Fixed ReDoS issue in angular.copy()  
• This fix corrected the logic for copying RegExp in angular.copy and solved a high severity threat related to ReDoS (CVE-2023-26116) 
• $resource: Fixed ReDoS issue with URLs that have trailing slashes  
• Addressed the ReDoS high severity vulnerability (CVE-2023-26117). This fix resolved the trailing slashes issue in $resource.  
• input[url]: Fixed ReDoS issue in input URL 
• This fix addressed a high severity threat related to ReDoS and improves performance in URL_REGEXP (CVE-2023-26118) 

NVD Listing: 

Bug Fixes 

• angular.copy(): Fixed ReDoS issue in angular.copy()  
• This fix corrected the logic for copying RegExp in angular.copy and solved a high severity threat related to ReDoS (CVE-2023-26116) 
• $resource: Fixed ReDoS issue with URLs that have trailing slashes  
• Addressed the ReDoS high severity vulnerability (CVE-2023-26117). This fix resolved the trailing slashes issue in $resource.  
• input[url]: Fixed ReDoS issue in input URL 
• This fix addressed a high severity threat related to ReDoS and improves performance in URL_REGEXP (CVE-2023-26118) 

NVD Listing: NVD - CVE-2024-21490

Bug Fixes  

• ng-srcset: Addressed a ReDoS vulnerability in the ng-srcset directive. 
• This update enhances the performance of the ng-srcset directive and mitigates a high-severity risk associated with ReDoS (CVE-2024-21490). 

NVD Listing: NVD - CVE-2020-7676

Bug Fixes 

• This release provides fixes for two vulnerabilities cherry-picked from AngularJS version 1.8.x 
• Medium severity CVE-2020-7676  
• High severity CWE-79 
• Fix for CVE-2020-7676 addresses cross-site scripting (XSS) where the regex-based input HTML replacement may turn sanitized code into unsanitized code. 
• Fix for CWE-79 provides a solution while using JqLite to prevent a possible high-severity cross-site scripting (XSS) vulnerability due to regex-based HTML replacement. 
• Note that this patch is only for JqLite and not for JQuery, for more information about workarounds for JQuery consult the JQuery upgrade guide. 

NVD Listing: NVD - CVE-2022-25869

Bug Fixes  

• Fixed IE textarea value interpolation is omitted when reloading and using the browser back/forward functionality. 
• Fixed a medium severity cross-site scripting (XSS) vulnerability due to insecure page catching in the Internet Explorer (IE) browser. If your users are not using IE, this CVE is not exploitable (CVE-2022-25869).