0

The package angular after 1.7.0 is vulnerable to Regular Expression Denial of Service (ReDoS). There aren't many details available around this issue. Since this version of Angular is out of support, I'm looking for the right ways to fix and test this vulnerability.

This is the first time I'm trying to fix Angular vulnerability, Any pointers on fixing/testing it will be appreciated.

Improve this question
1
  • Did you looked at the PoC exploits for this issue? Doesn't this vulnerability require local access to be achieved?
    – Life is complex
    Aug 30, 2022 at 13:52

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.