Skip to content
@angular vulnerabilities
Newest
-
@angular router, angular +1 more
Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
CVE-2026-101896
Fix available
8.2 High
-
@angular platform-server, angular +1 more
Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE
CVE-2026-101895
Fix available
8.7 High
-
@angular compiler, angular, @angular core +2 more
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
CVE-2026-69151
Fix available
7.6 High
-
@angular platform-server, angular +1 more
Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
CVE-2026-69149
Fix available
8.6 High
-
angular, @angular common +1 more
Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
CVE-2026-68945
Fix available
8.8 High
-
@angular compiler, core, angular cli +2 more
Angular has XSS in i18n attribute bindings
CVE-2026-32635
Public exploitFix available
8.6 High
-
@angular compiler
Exposure of server configuration
CVE-2020-26294
Fix available
7.4 High