{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.7.0"}],"component":"angular","cve_ids":["CVE-2022-25844"],"ecosystem":"npm","epss":0.04927,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m2h2-264f-f486","id":"tcs_01M5KFZBPAGCVZRR7RXKE3PDCT","modified_at":"2026-09-10T03:49:34.413714388Z","published_at":"2022-05-03T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-m2h2-264f-f486","https://nvd.nist.gov/vuln/detail/CVE-2022-25844","https://github.com/angular/angular.js","https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2WUSPYOTOMAZPDEFPWPSCSPMNODRDKK3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LNAKCNTVBIHWAUT3FKWV5N67PQXSZOO","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WUSPYOTOMAZPDEFPWPSCSPMNODRDKK3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LNAKCNTVBIHWAUT3FKWV5N67PQXSZOO","https://security.netapp.com/advisory/ntap-20220629-0009","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2772736","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-2772738","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2772737","https://snyk.io/vuln/SNYK-JS-ANGULAR-2772735","https://stackblitz.com/edit/angularjs-material-blank-zvtdvb"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-m2h2-264f-f486","url":"https://osv.dev/vulnerability/GHSA-m2h2-264f-f486"}],"summary":"angular vulnerable to regular expression denial of service (ReDoS)"}