{"id":"ECHO-f034-e030-b648","modified":"2026-11-12T08:16:21.546144973Z","published":"2024-02-10T06:30:19Z","upstream":["CVE-2024-21490","GHSA-4w4v-5hc9-xrr2"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2024-21490"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21490"},{"type":"WEB","url":"https://security.snyk.io/vuln/SNYK-JS-ANGULAR-6091113"},{"type":"WEB","url":"https://stackblitz.com/edit/angularjs-vulnerability-ng-srcset-redos"},{"type":"WEB","url":"https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-6241746"},{"type":"WEB","url":"https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6241747"},{"type":"WEB","url":"https://support.herodevs.com/hc/en-us/articles/25715686953485-CVE-2024-21490-AngularJS-Regular-Expression-Denial-of-Service-ReDoS"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html"},{"type":"WEB","url":"https://github.com/advisories/GHSA-4w4v-5hc9-xrr2"}],"affected":[{"package":{"name":"angular","ecosystem":"Echo:npm","purl":"pkg:npm/angular"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0"},{"fixed":"1.6.10+echo.1"}]},{"type":"ECOSYSTEM","events":[{"introduced":"1.8.3"},{"fixed":"1.8.3+echo.1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-f034-e030-b648.json"}}],"schema_version":"1.9.2"}