{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.8.3"}],"component":"angular","cve_ids":["CVE-2023-26116"],"ecosystem":"npm","epss":0.01695,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2vrf-hf26-jrp5","id":"tcs_01M5KEV6G24JE7W6WRPKV5EAKH","modified_at":"2026-09-10T03:49:52.298608293Z","published_at":"2023-03-30T06:30:26Z","references":["https://osv.dev/vulnerability/GHSA-2vrf-hf26-jrp5","https://nvd.nist.gov/vuln/detail/CVE-2023-26116","https://github.com/angular/angular.js","https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406320","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406322","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406321","https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373044","https://stackblitz.com/edit/angularjs-vulnerability-angular-copy-redos"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-2vrf-hf26-jrp5","url":"https://osv.dev/vulnerability/GHSA-2vrf-hf26-jrp5"}],"summary":"angular vulnerable to regular expression denial of service via the angular.copy() utility"}