Description
Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
Published: 2023-03-30
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4242-1 angular.js security update
EUVD EUVD EUVD-2023-0833 Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
Github GHSA Github GHSA GHSA-2vrf-hf26-jrp5 angular vulnerable to regular expression denial of service via the angular.copy() utility
Ubuntu USN Ubuntu USN USN-7958-1 AngularJS vulnerabilities
History

Thu, 20 Nov 2025 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Angularjs angularjs
CPEs cpe:2.3:a:angularjs:angular:*:*:*:*:*:node.js:*:* cpe:2.3:a:angularjs:angularjs:*:*:*:*:*:*:*:*
Vendors & Products Angularjs angular
Angularjs angularjs

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Fri, 14 Feb 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Angularjs Angularjs
Fedoraproject Fedora
cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published:

Updated: 2025-11-03T19:28:05.754Z

Reserved: 2023-02-20T10:28:48.923Z

Link: CVE-2023-26116

cve-icon Vulnrichment

Updated: 2025-11-03T19:28:05.754Z

cve-icon NVD

Status : Modified

Published: 2023-03-30T05:15:07.410

Modified: 2025-11-20T17:53:57.180

Link: CVE-2023-26116

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-03-30T00:00:00Z

Links: CVE-2023-26116 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses