XLTS for AngularJS v1.5.24 Released

v1.5.24

‍

Bug Fixes

• $compile: always sanitize image sources on <image> SVG element
  • This fixes a Medium Severity Content Spoofing vulnerability (CVE-2025-0716).

‍

Breaking Changes

$compile due to:

• always sanitize image sources on <image> SVG element
  ‍
  The changes in the sanitization logic may break specific usage patterns. For detailed migration steps, please refer to the CHANGELOG.md files included in XLTS for AngularJS v1.5.24 packages.
  
  
  
  

‍

FAQ

Updated: March 5, 2024

The first high-severity CVE since AngularJS End of Life has been officially reported. For AngularJS Never-Ending Support (formerly XLTS) clients, we found this CVE last year and issued a fix immediately. For all others, as Google’s official AngularJS long-term support partner, we encourage you to either:

1. Migrate off of AngularJS, or
2. Contact HeroDevs about how you can keep your AngularJS environment secure, compliant, and compatible indefinitely.