{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.8.3"}],"component":"angular","cve_ids":["CVE-2023-26117"],"ecosystem":"npm","epss":0.01695,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2qqx-w9hr-q5gx","id":"tcs_01M5KETWX1KK8B3YF1G86FCQXG","modified_at":"2026-09-10T03:49:52.313664587Z","published_at":"2023-03-30T06:30:26Z","references":["https://osv.dev/vulnerability/GHSA-2qqx-w9hr-q5gx","https://nvd.nist.gov/vuln/detail/CVE-2023-26117","https://github.com/angular/angular.js","https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406323","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406325","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406324","https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373045","https://stackblitz.com/edit/angularjs-vulnerability-resource-trailing-slashes-redos"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-2qqx-w9hr-q5gx","url":"https://osv.dev/vulnerability/GHSA-2qqx-w9hr-q5gx"}],"summary":"angular vulnerable to regular expression denial of service via the $resource service"}