CVE-2025-2336
AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects AngularJS versions greater than or equal to 1.3.1.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects AngularJS versions greater than or equal to 1.3.1.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
CVE-2025-2336- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-791
- Updated
- 2026-11-02
EUVDEUVD-2025-16899
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects AngularJS versions greater than or equal to 1.3.1.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
EUVD-2025-16899- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4p4w-6hg8-63wx
AngularJS Incomplete Filtering of Special Elements vulnerability
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects AngularJS versions greater than or equal to 1.3.1.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
GHSA-4p4w-6hg8-63wx- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-791
- Updated
- 2026-11-02
NVD
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects AngularJS versions greater than or equal to 1.3.1.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
CVE-2025-2336- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-791
- Updated
- 2026-11-02
OSV
AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects AngularJS versions greater than or equal to 1.3.1.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
CVE-2025-2336- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-791
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-2336
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images. This issue affects AngularJS versions greater than or equal to 1.3.1. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
DEBIAN-CVE-2025-2336- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
Show 14 moreShow less
OSVGHSA-4p4w-6hg8-63wx
AngularJS Incomplete Filtering of Special Elements vulnerability
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects AngularJS versions greater than or equal to 1.3.1.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
GHSA-4p4w-6hg8-63wx- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-791
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-2336
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images. This issue affects AngularJS versions greater than or equal to 1.3.1. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
UBUNTU-CVE-2025-2336- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVCLSA-2026-1773706637 No score
TuxCare security update for angular (11 CVEs)
TuxCare rebuilt angular to address 11 CVEs. Fixed in 1.8.2-tuxcare.1.
- Record
CLSA-2026-1773706637- Updated
- 2026-11-02
OSVCLSA-2026-1773793040 No score
TuxCare security update for angular (9 CVEs)
TuxCare rebuilt angular to address 9 CVEs. Fixed in 1.6.10-tuxcare.1.
- Record
CLSA-2026-1773793040- Updated
- 2026-11-02
OSVCLSA-2026-1773965926 No score
TuxCare security update for angular (8 CVEs)
TuxCare rebuilt angular to address 8 CVEs. Fixed in 1.8.3-tuxcare.1.
- Record
CLSA-2026-1773965926- Updated
- 2026-11-02
OSVCLSA-2026-1774052346 No score
TuxCare security update for angular (2 CVEs)
TuxCare rebuilt angular to address 2 CVEs. Fixed in 1.7.9-tuxcare.3.
- Record
CLSA-2026-1774052346- Updated
- 2026-11-02
OSVCLSA-2026-1774052360 No score
TuxCare security update for angular (3 CVEs)
TuxCare rebuilt angular to address 3 CVEs. Fixed in 1.5.11-tuxcare.4.
- Record
CLSA-2026-1774052360- Updated
- 2026-11-02
OSVCLSA-2026-1775694723 No score
TuxCare security update for angular-sanitize (1 CVE)
TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.8.2-tuxcare.1.
- Record
CLSA-2026-1775694723- Updated
- 2026-11-02
OSVCLSA-2026-1775694727 No score
TuxCare security update for angular-sanitize (1 CVE)
TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.8.3-tuxcare.1.
- Record
CLSA-2026-1775694727- Updated
- 2026-11-02
OSVCLSA-2026-1775694728 No score
TuxCare security update for angular-sanitize (2 CVEs)
TuxCare rebuilt angular-sanitize to address 2 CVEs. Fixed in 1.6.10-tuxcare.1.
- Record
CLSA-2026-1775694728- Updated
- 2026-11-02
OSVCLSA-2026-1781657704 No score
TuxCare security update for angular-sanitize (1 CVE)
TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.5.5-tuxcare.1.
- Record
CLSA-2026-1781657704- Updated
- 2026-11-02
OSVCLSA-2026-1785381052 No score
TuxCare security update for angular (4 CVEs)
TuxCare rebuilt angular to address 4 CVEs. Fixed in 1.5.10-tuxcare.3.
- Record
CLSA-2026-1785381052- Updated
- 2026-11-02
OSVCLSA-2026-1786355374 No score
TuxCare security update for angular-sanitize (1 CVE)
TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.5.11-tuxcare.1.
- Record
CLSA-2026-1786355374- Updated
- 2026-11-02
OSVROOT-APP-NPM-CVE-2025-2336 No score
CVE-2025-2336 in @rootio/angular-sanitize - Patched by Root
Root has patched CVE-2025-2336 in the @rootio/angular-sanitize package for Root:npm. Multiple fixed versions available.
- Record
ROOT-APP-NPM-CVE-2025-2336- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
angular-sanitizenpm |
1.3.1 to 1.8.3 | None known |
angularTuxCare:npm From an advisory covering 11 CVEs |
1.8.2-tuxcare.0 up to 1.8.2-tuxcare.1, plus listed versions 1.8.2 |
1.8.2-tuxcare.1 |
angularTuxCare:npm From an advisory covering 9 CVEs |
1.6.10-tuxcare.0 up to 1.6.10-tuxcare.1, plus listed versions 1.6.10 |
1.6.10-tuxcare.1 |
angularTuxCare:npm From an advisory covering 8 CVEs |
1.8.3-tuxcare.0 up to 1.8.3-tuxcare.1, plus listed versions 1.8.3 |
1.8.3-tuxcare.1 |
angularTuxCare:npm From an advisory covering 2 CVEs |
1.7.9-tuxcare.0 up to 1.7.9-tuxcare.3, plus listed versions 1.7.91.7.9-tuxcare.11.7.9-tuxcare.2 |
1.7.9-tuxcare.3 |
angularTuxCare:npm From an advisory covering 3 CVEs |
1.5.11-tuxcare.0 up to 1.5.11-tuxcare.4, plus listed versions 1.5.111.5.11-tuxcare.11.5.11-tuxcare.21.5.11-tuxcare.3 |
1.5.11-tuxcare.4 |
angular-sanitizeTuxCare:npm |
1.8.2-tuxcare.0 up to 1.8.2-tuxcare.1, plus listed versions 1.8.2 |
1.8.2-tuxcare.1 |
angular-sanitizeTuxCare:npm |
1.8.3-tuxcare.0 up to 1.8.3-tuxcare.1, plus listed versions 1.8.3 |
1.8.3-tuxcare.1 |
angular-sanitizeTuxCare:npm From an advisory covering 2 CVEs |
1.6.10-tuxcare.0 up to 1.6.10-tuxcare.1, plus listed versions 1.6.10 |
1.6.10-tuxcare.1 |
angular-sanitizeTuxCare:npm |
1.5.5-tuxcare.0 up to 1.5.5-tuxcare.1, plus listed versions 1.5.5 |
1.5.5-tuxcare.1 |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
angularTuxCare:npm From an advisory covering 4 CVEs |
1.5.10-tuxcare.0 up to 1.5.10-tuxcare.3, plus listed versions 1.5.101.5.10-tuxcare.11.5.10-tuxcare.2 |
1.5.10-tuxcare.3 |
angular-sanitizeTuxCare:npm |
1.5.11-tuxcare.0 up to 1.5.11-tuxcare.1, plus listed versions 1.5.11 |
1.5.11-tuxcare.1 |
angular.jsDebian:12 |
before 1.8.3-1+deb12u1, plus listed versions 1.8.3-11.8.3-1+deb12u1~deb11u1 |
1.8.3-1+deb12u1 |
angular.jsDebian:13 |
before 1.8.3-2 | 1.8.3-2 |
angular.jsDebian:11 From an advisory covering 9 CVEs |
before 1.8.3-1+deb12u1~deb11u1, plus listed versions 1.8.2-21.8.3-1 |
1.8.3-1+deb12u1~deb11u1 |
@rootio/angular-sanitizeRoot:npm |
before 1.8.3-root.io.1 | 1.8.3-root.io.1 |
angular-sanitizeRoot:npm |
before 1.8.3-aikido.1 | 1.8.3-aikido.1 |
angular.jsUbuntu:Pro:18.04:LTS |
before 1.5.10-1ubuntu0.1~esm1, plus listed versions 1.5.10-1 |
1.5.10-1ubuntu0.1~esm1 |
angular.jsUbuntu:Pro:20.04:LTS |
before 1.7.9-1ubuntu0.1~esm1, plus listed versions 1.5.10-11.7.9-1 |
1.7.9-1ubuntu0.1~esm1 |
angular.jsUbuntu:22.04:LTS |
before 1.8.2-2ubuntu0.1, plus listed versions 1.8.2-2 |
1.8.2-2ubuntu0.1 |
angular.jsUbuntu:24.04:LTS |
before 1.8.3-1ubuntu0.24.04.1, plus listed versions 1.8.3-1 |
1.8.3-1ubuntu0.24.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-2336 is a medium vulnerability (CVSS 4.8) in Google Angularjs, published June 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in angular-sanitize 1.8.2-tuxcare.1.
References
herodevs.com/vulnerability-directory/cve-2025-2336
codepen.io/herodevs/pen/bNGYaXx/412a3a4218387479898912f60c269c6c
lists.debian.org/debian-lts-announce/2025/07/msg00005.html
nvd.nist.gov/vuln/detail/CVE-2025-2336
github.com/advisories/GHSA-4p4w-6hg8-63wx