Description
Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element due to the usage of an insecure regular expression in the input[url] functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2016-8740)
WordPress Plugin Answer My Question Multiple Cross-Site Scripting Vulnerabilities (1.1)
Atlassian Jira CVE-2021-26075 Vulnerability (CVE-2021-26075)
SharePoint CVE-2023-38177 Vulnerability (CVE-2023-38177)
XWikiplatform Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-40104)