angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade angular.js | Jul 30, 2024 | Jun 8, 2020 |
| F5 Big Ip | — | — | Feb 18, 2022 | Jun 8, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub