angular-expressions (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package angular-expressions, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2026-44643 — CVSS 10.0 (critical): Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a…
• CVE-2024-54152: Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can…
• CVE-2020-5219 — CVSS 8.7 (high): Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput)…
• CVE-2021-21277 — CVSS 8.5 (high): angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before…