← CVE Intelligence

CVE-2024-21490

n/a / angular PUBLISHED

Description (CNA)

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. **Note:** This package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core).

Affected (CNA)

Vendor / productVersions
n/a / angularaffected 1.3.0 before *
n/a / org.webjars.bower:angularaffected 1.3.0 before *
n/a / org.webjars.npm:angularaffected 1.3.0 before *
n/a / angularjsaffected 1.3.0 before *

CWE

CWE-1333

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.