Login Request a demo
AN
Vendor
angular
12 products with CVEs on record
54
CVEs
0
On KEV
7
New 30D
Products
AN
angular
angular
9.1
34 CVEs0 on KEV3 new
AN
angular-cli
angular
9.2
6 CVEs0 on KEV1 new
PL
platform-server
@angular/
8.7
2 CVEs0 on KEV1 new
DE
DevTools
angular
5.1
1 CVEs0 on KEV1 new
RO
router
@angular
8.2
1 CVEs0 on KEV1 new
AL
Angular Language Service
Angular
8.8
2 CVEs0 on KEV0 new
CO
compiler
@angular
9.0
2 CVEs0 on KEV0 new
CO
core
@angular
9.0
2 CVEs0 on KEV0 new
AN
Angular.ng-template
angular
8.8
1 CVEs0 on KEV0 new
CO
common
@angular
6.1
1 CVEs0 on KEV0 new
NG
@nguniversal/common
angular
9.2
1 CVEs0 on KEV0 new
NG
@nguniversal/express-engine
angular
9.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-101896
AN
angular
angular
8.2
1%
Oct 14Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
CVE-2026-101897
AN
angular
angular
5.1
0%
Oct 14Angular DevTools (Local DoS)
CVE-2026-101895
PL
platform-server
@angular/
8.7
1%
Oct 14Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE
CVE-2026-104871
AN
angular-cli
angular
6.3
0%
Oct 2Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows
CVE-2026-88060
AN
angular
angular
6.1
0%
Sep 10Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements
CVE-2026-88059
AN
angular
angular
5.8
0%
Sep 10Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`
CVE-2026-88058
AN
angular
angular
6.1
0%
Sep 10Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
CVE-2026-88057
AN
angular
angular
6.1
0%
Sep 10Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler
CVE-2026-88056
AN
angular
angular
9.1
1%
Sep 10Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
CVE-2026-69151
AN
angular
angular
6.1
0%
Aug 3Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
CVE-2026-69149
PL
platform-server
@angular
6.1
0%
Aug 3Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
CVE-2026-68945
AN
angular
angular
6.1
0%
Aug 3Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
CVE-2026-50171
AN
angular
angular
6.1
0%
Jun 22Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)
CVE-2026-50184
AN
angular
angular
6.1
0%
Jun 22Angular: Request Credential & Cache Policy Stripping in Angular Service Worker
CVE-2026-50169
AN
angular
angular
6.1
0%
Jun 22Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities
CVE-2026-46417
AN
angular
angular
6.1
0%
Jun 22Angular: SSRF via Hostname Hijacking in @angular/platform-server
CVE-2026-50168
AN
angular
angular
8.2
0%
Jun 22Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass
CVE-2026-50170
AN
angular
angular
7.5
0%
Jun 22Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache
CVE-2026-50556
AN
angular
angular
6.1
0%
Jun 22Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR
CVE-2026-50555
AN
angular
angular
6.1
0%
Jun 22Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-server
CVE-2026-54264
AN
angular
angular
6.1
0%
Jun 22Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker
CVE-2026-54268
AN
angular
angular
7.5
1%
Jun 22Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)
CVE-2026-54267
AN
angular
angular
6.1
0%
Jun 22Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
CVE-2026-54266
AN
angular
angular
6.1
0%
Jun 22Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning
CVE-2026-54265
AN
angular
angular
6.1
0%
Jun 22Angular: Two-Way Property Binding Sanitization Bypass (XSS)
CVE-2026-50178
AN
angular
angular
8.8
1%
Jun 22Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension
CVE-2026-52725
AN
angular
angular
6.1
0%
Jun 22Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)
CVE-2026-49241
AN
angular
angular
8.8
0%
Jun 22Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension
CVE-2026-50557
AN
angular
angular
6.1
0%
Jun 22Angular: Template and Attribute Namespace Sanitization Bypass (XSS)
CVE-2026-44437
AN
angular-cli
angular
6.1
0%
May 13Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix
CVE-2026-41423
AN
angular
angular
5.3
0%
May 8Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
CVE-2026-33397
AN
angular-cli
angular
6.1
0%
Mar 26Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass
CVE-2026-32635
CO
core
@angular
9.0
0%
Mar 13Angular has XSS in i18n attribute bindings
CVE-2026-27970
AN
angular
angular
6.1
1%
Feb 26Angular i18n vulnerable to Cross-Site Scripting (XSS)
CVE-2026-27739
AN
angular-cli
angular
9.2
1%
Feb 25Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
CVE-2026-27738
AN
angular-cli
angular
6.9
0%
Feb 25Angular SSR has an Open Redirect via X-Forwarded-Prefix
CVE-2026-22610
AN
angular
angular
6.1
0%
Jan 10Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
CVE-2025-66412
AN
Angular
Angular
5.4
0%
Dec 1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages
CVE-2025-61261
AN
Angular
Angular
5.4
0%
Nov 7A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via…
CVE-2021-4231
AN
Angular
Angular
5.4
1%
May 26A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2