{"action":"Upgrade angular-expressions to 1.1.2 or later.","affected":[{"fixed":"1.1.2","introduced":"0"}],"component":"angular-expressions","cve_ids":["CVE-2021-21277"],"ecosystem":"npm","epss":0.02848,"exploited":false,"fixed_versions":["1.1.2"],"ghsa_id":"GHSA-j6px-jwvv-vpwq","id":"tcs_01M5KFX6N02W6K746VK04E48TS","modified_at":"2026-09-10T03:49:14.136872209Z","published_at":"2021-02-01T15:01:26Z","references":["https://osv.dev/vulnerability/GHSA-j6px-jwvv-vpwq","https://github.com/peerigon/angular-expressions/security/advisories/GHSA-j6px-jwvv-vpwq","https://nvd.nist.gov/vuln/detail/CVE-2021-21277","https://github.com/peerigon/angular-expressions/commit/07edb62902b1f6127b3dcc013da61c6316dd0bf1","https://www.npmjs.com/package/angular-expressions","http://blog.angularjs.org/2016/09/angular-16-expression-sandbox-removal.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-j6px-jwvv-vpwq","url":"https://osv.dev/vulnerability/GHSA-j6px-jwvv-vpwq"}],"summary":"Angular Expressions - Remote Code Execution"}