CVE-2024-21490

CVE-2024-21490 is a denial-of-service vulnerability affecting AngularJS versions from 1.3.0, specifically due to a regular expression in the ng-srcset directive susceptible to catastrophic backtracking. This vulnerability carries a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity, leading to a denial of service without requiring user interaction or privileges. While the affected AngularJS package is End-of-Life and will not receive patches, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.