Search for packages
| purl | pkg:npm/angular-sanitize@1.3.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-s1yh-7m2a-y3g3
Aliases: CVE-2025-2336 GHSA-4p4w-6hg8-63wx |
AngularJS Incomplete Filtering of Special Elements vulnerability Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images. This issue affects AngularJS versions greater than or equal to 1.3.1. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status . | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T23:30:16.999707+00:00 | GitLab Importer | Affected by | VCID-s1yh-7m2a-y3g3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/angular-sanitize/CVE-2025-2336.yml | 38.4.0 |
| 2026-04-12T00:49:58.555272+00:00 | GitLab Importer | Affected by | VCID-s1yh-7m2a-y3g3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/angular-sanitize/CVE-2025-2336.yml | 38.3.0 |
| 2026-04-07T04:57:54.991789+00:00 | GHSA Importer | Affected by | VCID-s1yh-7m2a-y3g3 | https://github.com/advisories/GHSA-4p4w-6hg8-63wx | 38.1.0 |
| 2026-04-03T00:58:01.838663+00:00 | GitLab Importer | Affected by | VCID-s1yh-7m2a-y3g3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/angular-sanitize/CVE-2025-2336.yml | 38.1.0 |
| 2026-04-02T12:41:29.735836+00:00 | GitLab Importer | Affected by | VCID-s1yh-7m2a-y3g3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/angular-sanitize/CVE-2025-2336.yml | 38.0.0 |