CVE-2026-44643 — Angular Expressions - Remote Code Execution using filters

CVE-2026-44643

Angular Expressions - Remote Code Execution using filters PUBLISHED

Description (CNA)

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.

Affected (CNA)

Vendor / product	Versions
peerigon / angular-expressions	affected < 1.5.2

CWE

CWE-95

References

https://github.com/peerigon/angular-expressions/security/advisories/GHSA-pw8r-6689-xvf4

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.