critical10.0
CVE-2026-44643
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module.
Impact
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | angular-expressions | <= 1.5.1 | 1.5.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peerigon | Angular-Expressions | before 1.5.2 |