Vulnerabilities

TI-2026-54680 CVE-2026-78638 · GHSA-5jh7-c63f-jp85

peerigon unzip-crx/unzip-crx-3 Archive Extraction index.js unzip path traversal

MEDIUM 55

A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00172 Published 2026-08-25 No fix listed CWE-22

TI-2026-32543 CVE-2026-44643 · GHSA-pw8r-6689-xvf4

Angular Expressions - Remote Code Execution using filters

MEDIUM 49

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00476 Published 2026-05-11 Fixed in 1.5.2 CWE-95

TI-2024-36267 CVE-2024-54152 · GHSA-5462-4vcx-jh7j

Angular Expressions - Remote Code Execution when using locals

MEDIUM 46

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02242 Published 2024-12-10 Fixed in 1.4.3 CWE-94

TI-2021-04377 CVE-2021-21277 · GHSA-j6px-jwvv-vpwq

Angular Expressions - Remote Code Execution

MEDIUM 43

angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node".

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02848 Published 2021-02-01 Fixed in 1.1.2 CWE-74

TI-2020-04275 CVE-2020-5219 · GHSA-hxhm-96pp-2m43

Remote Code Execution in Angular Expressions