VULNERABILITY INTELLIGENCE

CVE-2023-26116

CVSS score5.3 MEDIUM
EPSS probability1.70%
CISA KEVNot currently listed
Published2023-03-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

Weakness classification

  • report@snyk.io: CWE-1333
  • nvd@nist.gov: CWE-1333
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-1333

Primary references