Security support for end-of-life AngularJS
Google ended support for AngularJS on 31 December 2021, and 1.8.3 is its last release. Applications built on it keep running, and so do its flaws. These are the versions found most often, with every vulnerability the US National Vulnerability Database lists for them.
Request a server assessmentAngularJS versions
| AngularJS | Notes | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| 1.5.8 | 31 December 2021 | 13 | 0 | 0 | Patch on order, 48 h | |
| 1.5.11 | 31 December 2021 | 13 | 0 | 0 | Patch on order, 48 h | |
| 1.8.2 | 31 December 2021 | 10 | 0 | 0 | Patch on order, 48 h | |
| 1.8.3 | Last AngularJS release | 31 December 2021 | 10 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the OSV open-source vulnerability database, 28 October 2026, for the upstream version, counting only entries where AngularJS itself is the vulnerable product. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. Your assessment shows which of them are real on your systems.
JavaScript libraries
Old jQuery, AngularJS and Vue 2: the versions security scans still find, and what affects them. All JavaScript libraries
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans