QwikSec

Security Database

CVE

CWE

Training

CVE-2026-44643

Published: May 11, 2026

Modified: May 11, 2026

PUBLISHED

Description

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.

Vendor	Product	Versions
peerigon	angular-expressions	affected `< 1.5.2`

Weaknesses (CWE)

References

https://github.com/peerigon/angular-expressions/security/advisories/GHSA-pw8r-6689-xvf4

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.