Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Angular Inefficient Regular Expression Complexity Vulnerability - CVE-2024-21490 - Vulnerability Database
Angular

Angular Inefficient Regular Expression Complexity Vulnerability - CVE-2024-21490

High
Reference: CVE-2024-21490
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-21490
Title: Angular Inefficient Regular Expression Complexity Vulnerability
Overview:

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input this can result in catastrophic backtracking and cause a denial of service. Note: This package is EOL and will not receive any updates to address this issue. Users should migrate to angular/core(https://www.npmjs.com/package/angular/core).