Regular Expression Vulnerability in AngularJS by Google

CVE-2025-4690

What is CVE-2025-4690?

A vulnerability exists in AngularJS's linky filter that utilizes a regular expression to identify URLs within input text. This flaw allows attackers to craft large inputs which exploit backtracking behavior of the regex engine, potentially causing a Denial of Service (DoS) by consuming excessive resources. All versions of AngularJS are affected by this issue, and as the project has reached its End-of-Life, no patches will be released to mitigate this vulnerability.

References