{"action":"Upgrade angular-expressions to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"angular-expressions","cve_ids":["CVE-2020-5219"],"ecosystem":"npm","epss":0.02393,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-hxhm-96pp-2m43","id":"tcs_01M5KFWFD9JHBQ2HMSS3N62XGW","modified_at":"2026-09-10T03:48:42.553593740Z","published_at":"2020-01-24T15:27:25Z","references":["https://osv.dev/vulnerability/GHSA-hxhm-96pp-2m43","https://github.com/peerigon/angular-expressions/security/advisories/GHSA-hxhm-96pp-2m43","https://nvd.nist.gov/vuln/detail/CVE-2020-5219","https://github.com/peerigon/angular-expressions/commit/061addfb9a9e932a970e5fcb913d020038e65667","http://blog.angularjs.org/2016/09/angular-16-expression-sandbox-removal.html"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-hxhm-96pp-2m43","url":"https://osv.dev/vulnerability/GHSA-hxhm-96pp-2m43"}],"summary":"Remote Code Execution in Angular Expressions"}