Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

29 records

Vendor: angular Component: Angular Clear all filters
TI-2026-60077 CVE-2026-88057 · GHSA-hh8m-fm6v-7cvg

Cross-site scripting in angular

Priority LOW 30

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00372 Published 2026-09-10 Partial fix · 20.3.28, 21.2.20 +1 CWE-79
TI-2026-34131 CVE-2026-46417 · GHSA-rfh7-fxqc-q52v

Angular: SSRF via Hostname Hijacking in @angular/platform-server

Priority MEDIUM 44

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00361 Published 2026-06-22 Partial fix · 22.0.0-next.12, 21.2.13 +2 CWE-918
TI-2026-37277 CVE-2026-50555 · GHSA-hqr9-c56f-3x7f

Cross-site scripting in angular

Priority LOW 39

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00267 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.16 +2 CWE-79
TI-2026-39167 CVE-2026-54267 · GHSA-rgjc-h3x7-9mwg

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Priority LOW 39

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00379 Published 2026-06-22 Fixed in 22.0.1, 21.2.17 +1 CWE-471
TI-2026-39165 CVE-2026-54265 · GHSA-58w9-8g37-x9v5

Angular: Two-Way Property Binding Sanitization Bypass (XSS)

Priority LOW 24

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00344 Published 2026-06-22 Partial fix · 22.0.1, 21.2.17 +1 CWE-79
TI-2026-37279 CVE-2026-50557 · GHSA-f3m7-gqxr-g87x

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Priority LOW 30

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00411 Published 2026-06-22 Partial fix · 21.2.15, 22.0.0-rc.2 +2 CWE-79
TI-2026-22313 CVE-2026-27970 · GHSA-prjf-86w9-mfqv

Angular i18n vulnerable to Cross-Site Scripting (XSS)

Priority LOW 36

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00547 Published 2026-02-26 Partial fix · 21.2.0, 21.1.6 +2 CWE-79
Load more