{"id":"EUVD-2026-29078","enisaUuid":"865542cf-25f0-371f-a014-b803557588a6","description":"Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.","datePublished":"May 11, 2026, 2:33:42 PM","dateUpdated":"May 11, 2026, 4:22:58 PM","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/peerigon/angular-expressions/security/advisories/GHSA-pw8r-6689-xvf4\n","aliases":"CVE-2026-44643\n","assigner":"GitHub_M","epss":0.48,"enisaIdProduct":[{"id":"bdaea2ba-07ad-3959-a8a2-ac74f45a4577","product":{"name":"angular-expressions","vendor":{"name":"peerigon"}},"product_version":"\u003c 1.5.2"}],"enisaIdVendor":[{"id":"91f66b51-2424-32eb-9d53-82e73641937a","vendor":{"name":"peerigon"}}],"enisaIdVulnerability":[{"id":"3d8fbbb6-8b2e-3199-9e9c-2b63d58c0af7","vulnerability":{"id":"CVE-2026-44643","description":"Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.","datePublished":"May 11, 2026, 2:33:42 PM","dateUpdated":"May 11, 2026, 4:22:58 PM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/peerigon/angular-expressions/security/advisories/GHSA-pw8r-6689-xvf4\n","enisa_id":"EUVD-2026-29078\n","assigner":"GitHub_M","epss":0.48,"dataProcessed":"Nov 3, 2026, 7:17:56 AM","vulnerabilityProduct":[{"id":"d199fe1a-45e5-3fa4-b425-89253cce56c7","product":{"name":"angular-expressions","vendor":{"name":"peerigon"}},"product_version":"\u003c 1.5.2"}],"vulnerabilityVendor":[{"id":"9caee500-2339-3832-a5e1-43d95c6960b3","vendor":{"name":"peerigon"}}]}},{"id":"d21b5672-6222-3ee5-a15d-516d96838327","vulnerability":{"id":"GHSA-pw8r-6689-xvf4","description":"Angular Expressions - Remote Code Execution using filters","datePublished":"May 11, 2026, 4:20:58 PM","dateUpdated":"May 13, 2026, 1:53:12 PM","baseScore":0.0,"references":"https://github.com/peerigon/angular-expressions/security/advisories/GHSA-pw8r-6689-xvf4\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44643\nhttps://github.com/peerigon/angular-expressions\n","enisa_id":"EUVD-2026-29078\n","aliases":"CVE-2026-44643\nGHSA-pw8r-6689-xvf4\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}