Update version ranges for AngularJS vulnerabilities (!27657) · Merge requests · GitLab.org / security-products / advisory-database

Matthias Schoettle requested to merge mschoettle/gemnasium-db:mschoettle-master-patch-c988 into master Mar 27, 2024

This MR fixes the affected ranges and fixed versions for the following AngularJS vulnerabilities. The LTS version (paid service) provides newer versions > 1.8.3 with fixes for these.

CVE-2022-25844: Fixed in AngularJS 1.8.8 (https://xlts.dev/blog/2022-04-11-xlts-for-angularjs-1-8-8)
CVE-2022-25869: Fixed in AngularJS 1.9.0 (https://xlts.dev/blog/2022-05-25-xlts-for-angularjs-1-9-0)
CVE-2024-21490: Fixed upper bound since it prevents higher versions < 1.9.3 to be found and reported (https://xlts.dev/blog/2023-08-18-xlts-for-angularjs-1-9-3)

Update version ranges for AngularJS vulnerabilities

Merge request reports