{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.3.1","last_affected":"1.8.3"}],"component":"angular-sanitize","cve_ids":["CVE-2025-2336"],"ecosystem":"npm","epss":0.00311,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4p4w-6hg8-63wx","id":"tcs_01M5KF10Z9H21Q95GJ32Q5SEDY","modified_at":"2025-11-03T21:33:59Z","published_at":"2025-06-04T18:30:58Z","references":["https://osv.dev/vulnerability/GHSA-4p4w-6hg8-63wx","https://nvd.nist.gov/vuln/detail/CVE-2025-2336","https://codepen.io/herodevs/pen/bNGYaXx/412a3a4218387479898912f60c269c6c","https://github.com/angular/angular.js","https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html","https://www.herodevs.com/vulnerability-directory/cve-2025-2336","https://www.herodevs.com/vulnerability-directory/cve-2025-2336?angularjs-nes"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-4p4w-6hg8-63wx","url":"https://osv.dev/vulnerability/GHSA-4p4w-6hg8-63wx"}],"summary":"AngularJS Incomplete Filtering of Special Elements vulnerability"}