VulertSecurity VulertSecurity

Vulnerability Database · npm · angular · Version

angular 1.7.1

1.7.1 is affected by 13 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 1.8.3.

Critical 0 High 3 Medium 7 Low 3 Unrated 0

All angular versions & vulnerabilities → Source repository Search the database for this package →
Released 08 Jun 2018 Status deprecated release Licence MIT Also known from other sources 13 Newer releases 144 Database updated 23/Oct/2026

Release and licence data published by the npm registry. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

angular 1.7.1 vulnerabilities

13 vulnerabilities cover angular 1.7.1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-11998: AngularJS Cross-Site Scripting Vulnerability in Deprecated Package 7.6 high No fix published 24 Jun 2026
CVE-2024-21490: Angular - Super-linear Runtime Due to Backtracking 7.5 high No fix published 10 Feb 2024
CVE-2019-10768: Prototype Pollution in angular 7.5 high 1.7.9 20 Nov 2019
CVE-2022-25869: Angular (deprecated package) Cross-site Scripting 6.1 medium No fix published 16 Jul 2022
CVE-2020-7676: Cross-Site Scripting in Angular 5.4 medium 1.8.0 18 Jun 2020
CVE-2023-26117: Regular Expression Denial of Service in angular 5.3 medium No fix published 30 Mar 2023
CVE-2023-26116: Angular - Regular Expression Denial of Service via angular.copy() 5.3 medium No fix published 30 Mar 2023
CVE-2023-26118: Regular Expression Denial of Service in angular 5.3 medium No fix published 30 Mar 2023
CVE-2022-25844: Angular - Regular Expression Denial of Service (ReDoS) 5.3 medium No fix published 03 May 2022
XSS Vulnerability in AngularJS 5.0 medium 1.8.0 05 Aug 2020
CVE-2025-0716: AngularJS Improper Sanitization of SVG Elements Leading to Content Spoofing 4.8 low No fix published 29 Apr 2025
AngularJS Image Source Bypass Vulnerability in npm/angular 4.8 low No fix published 09 Sep 2024
AngularJS - Bypassing Image Source Restrictions 4.8 low No fix published 09 Sep 2024

Looking for another version, or everything Vulert holds for angular?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About angular 1.7.1

Is angular 1.7.1 vulnerable?

Yes. 13 vulnerabilities in the Vulert database cover angular 1.7.1: 0 critical, 3 high, 7 medium and 3 low. The upgrade Vulert recommends is 1.8.3, and each entry above names the fixed version to move to.

Which version of angular should I use instead of 1.7.1?

1.8.3 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 1.7.1 the latest release of angular?

No. 1.7.1 was published 08 Jun 2018, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor angular for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the angular version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.