Read the docs

angular

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high30CVSS 7.0–8.9

Exploited now

angular records in CISA KEV

No angular vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Angular 29 records HIGH Angular Cli 3 records MEDIUM Angular Language Service 2 records MEDIUM

Records

29 records in Angular · all components

TI-2026-34131 CVE-2026-46417 · GHSA-rfh7-fxqc-q52v

Angular: SSRF via Hostname Hijacking in @angular/platform-server

Priority MEDIUM 44

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00361 Published 2026-06-22 Partial fix · 22.0.0-next.12, 21.2.13 +2 CWE-918
TI-2026-39167 CVE-2026-54267 · GHSA-rgjc-h3x7-9mwg

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Priority LOW 39

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00379 Published 2026-06-22 Fixed in 22.0.1, 21.2.17 +1 CWE-471
TI-2026-37277 CVE-2026-50555 · GHSA-hqr9-c56f-3x7f

Cross-site scripting in angular

Priority LOW 39

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00267 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.16 +2 CWE-79
TI-2026-18171 CVE-2026-22610 · GHSA-jrmj-c5cx-3cw6

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Priority LOW 39

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00439 Published 2026-01-10 Partial fix · 21.1.0-rc.0, 21.0.7 +2 CWE-79
TI-2026-22313 CVE-2026-27970 · GHSA-prjf-86w9-mfqv

Angular i18n vulnerable to Cross-Site Scripting (XSS)

Priority LOW 36

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00547 Published 2026-02-26 Partial fix · 21.2.0, 21.1.6 +2 CWE-79
TI-2026-60077 CVE-2026-88057 · GHSA-hh8m-fm6v-7cvg

Cross-site scripting in angular

Priority LOW 30

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00372 Published 2026-09-10 Partial fix · 20.3.28, 21.2.20 +1 CWE-79
TI-2026-37279 CVE-2026-50557 · GHSA-f3m7-gqxr-g87x

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Priority LOW 30

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00411 Published 2026-06-22 Partial fix · 21.2.15, 22.0.0-rc.2 +2 CWE-79
TI-2021-03092 CVE-2021-4231 · GHSA-c75v-2vq8-878f

Angular Comment cross site scripting

Priority LOW 27

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01181 Published 2022-05-26 Partial fix · 11.0.5, 11.1.0-next.3 +1 CWE-79
Load more
Open these records in search →