CVE-2026-44643: Peerigon Angular-Expressions

Critical severity, CVSS 10.0. EPSS: 0.7% chance of exploitation in the next 30 days.

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.

Affected products

• Peerigon Angular-Expressions: before 1.5.2 (fixed in 1.5.2)

Published 2026-05-11. Last modified 2026-06-17.