VulertSecurity VulertSecurity

Vulnerability Database · npm · angular · Version

angular 1.2.12

1.2.12 is affected by 12 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 1.8.3.

Critical 0 High 2 Medium 8 Low 2 Unrated 0

All angular versions & vulnerabilities → Search the database for this package →
Released 26 Mar 2014 Status deprecated release Licence MIT Also known from other sources 0 Newer releases 144 Database updated 23/Oct/2026

Release and licence data published by the npm registry. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

angular 1.2.12 vulnerabilities

12 vulnerabilities cover angular 1.2.12. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-11998: AngularJS Cross-Site Scripting Vulnerability in Deprecated Package 7.6 high No fix published 24 Jun 2026
CVE-2019-10768: Prototype Pollution in angular 7.5 high 1.7.9 20 Nov 2019
CVE-2022-25869: Angular (deprecated package) Cross-site Scripting 6.1 medium No fix published 16 Jul 2022
CVE-2019-14863: AngularJS Cross-site Scripting Vulnerability 6.1 medium 1.5.0-beta.1 14 Feb 2020
CVE-2020-7676: Cross-Site Scripting in Angular 5.4 medium 1.8.0 18 Jun 2020
CVE-2023-26117: Regular Expression Denial of Service in angular 5.3 medium No fix published 30 Mar 2023
CVE-2023-26116: Angular - Regular Expression Denial of Service via angular.copy() 5.3 medium No fix published 30 Mar 2023
CVE-2023-26118: Regular Expression Denial of Service in angular 5.3 medium No fix published 30 Mar 2023
XSS Vulnerability in AngularJS 5.0 medium 1.8.0 05 Aug 2020
CVE-2025-0716: AngularJS Improper Sanitization of SVG Elements Leading to Content Spoofing 4.8 low No fix published 29 Apr 2025
AngularJS - Bypassing Image Source Restrictions 4.8 low No fix published 09 Sep 2024
Cross-Site Scripting via JSONP in Angular N/A medium 1.6.0 27 Jun 2019

Looking for another version, or everything Vulert holds for angular?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About angular 1.2.12

Is angular 1.2.12 vulnerable?

Yes. 12 vulnerabilities in the Vulert database cover angular 1.2.12: 0 critical, 2 high, 8 medium and 2 low. The upgrade Vulert recommends is 1.8.3, and each entry above names the fixed version to move to.

Which version of angular should I use instead of 1.2.12?

1.8.3 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 1.2.12 the latest release of angular?

No. 1.2.12 was published 26 Mar 2014, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor angular for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the angular version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.