CVE-2025-4690
AngularJS 'linky' filter ReDoS
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a
Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS attack on the application.
This issue affects all versions of AngularJS.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
AngularJS 'linky' filter ReDoS
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a
Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS attack on the application.
This issue affects all versions of AngularJS.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
CVE-2025-4690- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-1333
- Updated
- 2026-11-02
EUVDEUVD-2025-25177
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a
Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS attack on the application.
This issue affects all versions of AngularJS.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
EUVD-2025-25177- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hfff-63hg-f47j
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter...
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a
Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS attack on the application.
This issue affects all versions of AngularJS.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
GHSA-hfff-63hg-f47j- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-1333
- Updated
- 2026-11-02
NVD
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a
Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS attack on the application.
This issue affects all versions of AngularJS.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
CVE-2025-4690- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-1333
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-4690
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS attack on the application. This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
DEBIAN-CVE-2025-4690- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-4690
A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS attack on the application. This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
- Record
UBUNTU-CVE-2025-4690- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 9 moreShow less
OSVCLSA-2026-1773706637 No score
TuxCare security update for angular (11 CVEs)
TuxCare rebuilt angular to address 11 CVEs. Fixed in 1.8.2-tuxcare.1.
- Record
CLSA-2026-1773706637- Updated
- 2026-11-02
OSVCLSA-2026-1773793040 No score
TuxCare security update for angular (9 CVEs)
TuxCare rebuilt angular to address 9 CVEs. Fixed in 1.6.10-tuxcare.1.
- Record
CLSA-2026-1773793040- Updated
- 2026-11-02
OSVCLSA-2026-1773965926 No score
TuxCare security update for angular (8 CVEs)
TuxCare rebuilt angular to address 8 CVEs. Fixed in 1.8.3-tuxcare.1.
- Record
CLSA-2026-1773965926- Updated
- 2026-11-02
OSVCLSA-2026-1774052346 No score
TuxCare security update for angular (2 CVEs)
TuxCare rebuilt angular to address 2 CVEs. Fixed in 1.7.9-tuxcare.3.
- Record
CLSA-2026-1774052346- Updated
- 2026-11-02
OSVCLSA-2026-1774052360 No score
TuxCare security update for angular (3 CVEs)
TuxCare rebuilt angular to address 3 CVEs. Fixed in 1.5.11-tuxcare.4.
- Record
CLSA-2026-1774052360- Updated
- 2026-11-02
OSVCLSA-2026-1775694728 No score
TuxCare security update for angular-sanitize (2 CVEs)
TuxCare rebuilt angular-sanitize to address 2 CVEs. Fixed in 1.6.10-tuxcare.1.
- Record
CLSA-2026-1775694728- Updated
- 2026-11-02
OSVCLSA-2026-1785381052 No score
TuxCare security update for angular (4 CVEs)
TuxCare rebuilt angular to address 4 CVEs. Fixed in 1.5.10-tuxcare.3.
- Record
CLSA-2026-1785381052- Updated
- 2026-11-02
OSVCLSA-2026-1785554487 No score
TuxCare security update for angular-sanitize (1 CVE)
TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.8.3-tuxcare.6.
- Record
CLSA-2026-1785554487- Updated
- 2026-11-02
OSVCLSA-2026-1785554488 No score
TuxCare security update for angular-sanitize (1 CVE)
TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.8.2-tuxcare.7.
- Record
CLSA-2026-1785554488- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
angularTuxCare:npm From an advisory covering 11 CVEs |
1.8.2-tuxcare.0 up to 1.8.2-tuxcare.1, plus listed versions 1.8.2 |
1.8.2-tuxcare.1 |
angularTuxCare:npm From an advisory covering 9 CVEs |
1.6.10-tuxcare.0 up to 1.6.10-tuxcare.1, plus listed versions 1.6.10 |
1.6.10-tuxcare.1 |
angularTuxCare:npm From an advisory covering 8 CVEs |
1.8.3-tuxcare.0 up to 1.8.3-tuxcare.1, plus listed versions 1.8.3 |
1.8.3-tuxcare.1 |
angularTuxCare:npm From an advisory covering 2 CVEs |
1.7.9-tuxcare.0 up to 1.7.9-tuxcare.3, plus listed versions 1.7.91.7.9-tuxcare.11.7.9-tuxcare.2 |
1.7.9-tuxcare.3 |
angularTuxCare:npm From an advisory covering 3 CVEs |
1.5.11-tuxcare.0 up to 1.5.11-tuxcare.4, plus listed versions 1.5.111.5.11-tuxcare.11.5.11-tuxcare.21.5.11-tuxcare.3 |
1.5.11-tuxcare.4 |
angular-sanitizeTuxCare:npm From an advisory covering 2 CVEs |
1.6.10-tuxcare.0 up to 1.6.10-tuxcare.1, plus listed versions 1.6.10 |
1.6.10-tuxcare.1 |
angularTuxCare:npm From an advisory covering 4 CVEs |
1.5.10-tuxcare.0 up to 1.5.10-tuxcare.3, plus listed versions 1.5.101.5.10-tuxcare.11.5.10-tuxcare.2 |
1.5.10-tuxcare.3 |
angular-sanitizeTuxCare:npm |
1.8.3-tuxcare.0 up to 1.8.3-tuxcare.6, plus listed versions 1.8.31.8.3-tuxcare.11.8.3-tuxcare.21.8.3-tuxcare.31.8.3-tuxcare.41.8.3-tuxcare.5 |
1.8.3-tuxcare.6 |
angular-sanitizeTuxCare:npm |
1.8.2-tuxcare.0 up to 1.8.2-tuxcare.7, plus listed versions 1.8.21.8.2-tuxcare.11.8.2-tuxcare.21.8.2-tuxcare.31.8.2-tuxcare.41.8.2-tuxcare.51.8.2-tuxcare.6 |
1.8.2-tuxcare.7 |
angular.jsDebian:12 |
All versions, plus listed versions 1.8.3-11.8.3-1+deb12u11.8.3-1+deb12u1~deb11u11.8.3-21.8.3-3 |
None known |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
angular.jsDebian:13 |
All versions, plus listed versions 1.8.3-3 |
None known |
angular.jsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.2.28-1ubuntu21.2.28-1ubuntu2+esm1 |
None known |
angular.jsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.5.10-11.5.10-1ubuntu0.1~esm1 |
None known |
angular.jsUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.5.10-11.7.9-11.7.9-1ubuntu0.1~esm1 |
None known |
angular.jsUbuntu:22.04:LTS |
All versions, plus listed versions 1.8.2-21.8.2-2ubuntu0.1 |
None known |
angular.jsUbuntu:24.04:LTS |
All versions, plus listed versions 1.8.3-11.8.3-1ubuntu0.24.04.1 |
None known |
angular.jsUbuntu:25.10 |
All versions, plus listed versions 1.8.3-11.8.3-3 |
None known |
angular.jsUbuntu:26.10 |
All versions, plus listed versions 1.8.3-3 |
None known |
angular.jsUbuntu:26.04:LTS |
All versions, plus listed versions 1.8.3-3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-4690 is a medium vulnerability (CVSS 4.3) in Google Angularjs, published August 19, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in angular-sanitize 1.8.3-tuxcare.6.
References
herodevs.com/vulnerability-directory/cve-2025-4690
codepen.io/herodevs/pen/RNNEPzP/751b91eab7730dff277523f3d50e4b77
nvd.nist.gov/vuln/detail/CVE-2025-4690
github.com/advisories/GHSA-hfff-63hg-f47j
security-tracker.debian.org/tracker/CVE-2025-4690
ubuntu.com/security/CVE-2025-4690
cve.org/CVERecord?id=CVE-2025-4690