Search for packages
| purl | pkg:deb/debian/angular.js@1.5.3-2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-ex2m-smbh-3kgy | AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes Versions of `angular` prior to 1.5.0-beta.1 are vulnerable to Cross-Site Scripting. The package fails to sanitize `xlink:href` attributes, which may allow attackers to execute arbitrary JavaScript in a victim's browser if the value is user-controlled. ## Recommendation Upgrade to version 1.5.0-beta.1 or later. |
CVE-2019-14863
GHSA-r5fx-8r73-v86c |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T08:59:47.683440+00:00 | Debian Importer | Fixing | VCID-ex2m-smbh-3kgy | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-11T18:01:57.975020+00:00 | Debian Importer | Fixing | VCID-ex2m-smbh-3kgy | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-02T17:03:29.286587+00:00 | Debian Importer | Fixing | VCID-ex2m-smbh-3kgy | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |