Vulnerabilities

Filters

Reset all

1 selected

47 records

Sort

Vendor: angular Clear all filters

TI-2026-85655 CVE-2026-111753

XSRF token leakage in Angular HttpClient via URL parsing mismatch

LOW 27

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00537 Published 2026-11-05 Fixed in 20.3.34, 21.0.3 CWE-201

TI-2026-84802 CVE-2026-111751

Denial of service in Angular SSR via RouterLink query parameters

MEDIUM 43

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00659 Published 2026-11-03 Fixed in 21.2.25, 22.2.1 CWE-400

TI-2026-84799 CVE-2026-111754

Open redirect in Angular SSR via protocol-relative URLs

LOW 25

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00977 Published 2026-11-03 Partial fix · 20.3.33, 21.2.25 +1 CWE-601

TI-2026-84798 CVE-2026-111752

Denial of service in Angular router during server-side rendering

LOW 38

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00988 Published 2026-11-03 Fixed in 20.3.33, 21.2.25 +1 CWE-400

TI-2026-74070 CVE-2026-101896

Denial of service in Angular SSR via numeric URL matrix parameters

MEDIUM 43

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00909 Published 2026-10-14 Fixed in 20.3.32, 21.2.24 +1 CWE-400

TI-2026-74071 CVE-2026-101897

Angular DevTools lets web pages pause other browser tabs

LOW 23

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00353 Published 2026-10-14 Fixed in 22.2.0-rc.0, 1.21.1 CWE-346

TI-2026-74069 CVE-2026-101895

Infinite loop in Angular SSR HTML parser allows denial of service

HIGH 77

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00872 Published 2026-10-14 Fixed in 20.3.31, 21.2.23 +1 CWE-400

TI-2026-66142 CVE-2026-104871 · GHSA-7g7c-h8rr-7p6q

Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

LOW 28

The Angular SSR is a server-rise rendering tool for Angular applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00421 Published 2026-10-02 Fixed in 20.3.36, 21.2.23 +1 CWE-22

TI-2026-60080 CVE-2026-88060 · GHSA-v3p8-whq6-r5jg

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

HIGH 72

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00362 Published 2026-09-10 Partial fix · 20.3.30, 21.2.22 +1 CWE-116

TI-2026-60079 CVE-2026-88059 · GHSA-p297-fm68-3q8c

Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`

LOW 26

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00339 Published 2026-09-10 Partial fix · 20.3.28, 21.2.20 +1 CWE-200

TI-2026-60078 CVE-2026-88058 · GHSA-j3r3-mxqp-r2p4

Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

HIGH 72

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00281 Published 2026-09-10 Fixed in 20.3.30, 21.2.22 +1 CWE-116

TI-2026-60077 CVE-2026-88057 · GHSA-hh8m-fm6v-7cvg

Cross-site scripting in angular

LOW 30

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00372 Published 2026-09-10 Partial fix · 20.3.28, 21.2.20 +1 CWE-79

TI-2026-60076 CVE-2026-88056 · GHSA-f6mr-pjwc-34m4

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

HIGH 76

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00541 Published 2026-09-10 Fixed in 20.3.30, 21.2.22 +1 CWE-918

TI-2026-48531 CVE-2026-69151 · GHSA-jj27-h5hq-8x99

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

LOW 33

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00333 Published 2026-08-03 Partial fix · 22.0.1, 21.2.19 +1 CWE-79

TI-2026-48530 CVE-2026-69149 · GHSA-vpx6-8pjr-4g3v

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

LOW 38

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00418 Published 2026-08-03 Fixed in 20.3.27, 21.2.19 +1 CWE-79

TI-2026-48469 CVE-2026-68945 · GHSA-jhpw-976m-542j

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

MEDIUM 43

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00177 Published 2026-08-03 Partial fix · 20.3.27, 21.2.19 +1 CWE-345

TI-2026-36934 CVE-2026-50171 · GHSA-p3vc-36g9-x9gr

Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

LOW 35

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00256 Published 2026-06-22 Partial fix · 22.0.0-rc.2, 21.2.15 +2 CWE-400

TI-2026-36943 CVE-2026-50184 · GHSA-95qp-cmmw-mgqv

Angular: Request Credential & Cache Policy Stripping in Angular Service Worker

LOW 31

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00208 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.15 +2 CWE-200

TI-2026-36932 CVE-2026-50169 · GHSA-gv2q-mqqv-365m

Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

LOW 25

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00228 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.15 +2 CWE-200

TI-2026-34131 CVE-2026-46417 · GHSA-rfh7-fxqc-q52v

Angular: SSRF via Hostname Hijacking in @angular/platform-server

MEDIUM 44

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00361 Published 2026-06-22 Partial fix · 22.0.0-next.12, 21.2.13 +2 CWE-918

TI-2026-36931 CVE-2026-50168 · GHSA-xrxm-cp7j-8xf6

Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass

MEDIUM 44

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00237 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.15 +2 CWE-346

TI-2026-36933 CVE-2026-50170 · GHSA-q6f4-qqrg-jv6x

Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

LOW 36

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00425 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.15 +2 CWE-524

TI-2026-37278 CVE-2026-50556 · GHSA-gxx4-3xcv-f8qx

Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR

LOW 39

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00412 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.16 +2 CWE-79

TI-2026-37277 CVE-2026-50555 · GHSA-hqr9-c56f-3x7f

Cross-site scripting in angular

LOW 39

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00267 Published 2026-06-22 Fixed in 22.0.0-rc.2, 21.2.16 +2 CWE-79

TI-2026-39164 CVE-2026-54264 · GHSA-qxh6-94w6-9r5p

Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker

LOW 36

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.0039 Published 2026-06-22 Fixed in 22.0.1, 21.2.17 +1 CWE-200