{
  "cveId": "CVE-2023-26116",
  "url": "https://patchblox.com/security/cve/CVE-2023-26116",
  "summary": "CVE-2023-26116 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2023-26116, released March 30, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libjs-angularjs: Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the an...",
  "description": "Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.",
  "published": "2023-03-29T22:15:00Z",
  "severity": "Medium",
  "cvss": 5.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
  "epss": 0.01695,
  "epssPercentile": 0.77292,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "angular.js",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.8.3-1\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2023-26116",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-26116",
      "released": "2023-03-30T05:15:07Z"
    },
    {
      "platform": "linux",
      "product": "angular.js",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.8.3-2",
      "fix": "DEBIAN-CVE-2023-26116",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-26116",
      "released": "2023-03-30T05:15:07Z"
    },
    {
      "platform": "linux",
      "product": "libjs-angularjs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.5.10-1ubuntu0.1~esm1",
      "fix": "libjs-angularjs 1.5.10-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libjs-angularjs-1.5.10-1ubuntu0.1-esm1",
      "released": "2025-06-04T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-angularjs",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.7.9-1ubuntu0.1~esm1",
      "fix": "libjs-angularjs 1.7.9-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjs-angularjs-1.7.9-1ubuntu0.1-esm1",
      "released": "2025-06-04T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-angularjs",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.8.2-2ubuntu0.1",
      "fix": "libjs-angularjs 1.8.2-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libjs-angularjs-1.8.2-2ubuntu0.1",
      "released": "2025-06-04T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-angularjs",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.8.3-1ubuntu0.24.04.1",
      "fix": "libjs-angularjs 1.8.3-1ubuntu0.24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libjs-angularjs-1.8.3-1ubuntu0.24.04.1",
      "released": "2025-06-04T10:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}