Description
Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
Remediation
References
Related Vulnerabilities
SharePoint Improper Authentication Vulnerability (CVE-2025-49706)
WebLogic CVE-2022-21350 Vulnerability (CVE-2022-21350)
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.5)
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42764)
Atlassian Confluence Unauthenticated Remote Code Execution Vulnerability (CVE-2022-26134)