CVE-2026-44643

CVSS Score & Metrics

Base Score

10.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H                                    

Vulnerability Description

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.

Vulnerability Details

Published Date

May 11, 2026

Last Modified

May 13, 2026

CWE ID

CWE-95

Source

NVD

Vendor

peerigon

Product

angular-expressions

External References

https://github.com/peerigon/angular-expressions/security/advisories/GHSA-pw8r-6689-xvf4

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment