{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.8.3"}],"component":"angular","cve_ids":["CVE-2022-25869"],"ecosystem":"npm","epss":0.0768,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-prc3-vjfx-vhm9","id":"tcs_01M5KG4CC2P3WC3FX7F7C3VJTX","modified_at":"2026-09-10T03:49:55.291770163Z","published_at":"2022-07-16T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-prc3-vjfx-vhm9","https://nvd.nist.gov/vuln/detail/CVE-2022-25869","https://glitch.com/edit/%23%21/angular-repro-textarea-xss","https://neverendingsupport.github.io/angularjs-poc-cve-2022-25869","https://security.snyk.io/vuln/SNYK-DOTNET-ANGULARJS-10771617","https://security.snyk.io/vuln/SNYK-DOTNET-ANGULARJSCORE-6084031","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2949783","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-2949784","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2949782","https://security.snyk.io/vuln/SNYK-JS-ANGULAR-2949781","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2949783","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-2949784","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2949782","https://snyk.io/vuln/SNYK-JS-ANGULAR-2949781","https://www.npmjs.com/package/angular"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-prc3-vjfx-vhm9","url":"https://osv.dev/vulnerability/GHSA-prc3-vjfx-vhm9"}],"summary":"Angular (deprecated package) Cross-site Scripting"}