angular vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 202640

Newest CVEs

• CVE-2026-111753

  Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

  angular · angular

  Medium5.9
• CVE-2026-111751

  Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

  angular · angular

  High8.2
• CVE-2026-111754

  Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)

  angular · angular

  Medium5.1
• CVE-2026-111752

  Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

  angular · angular

  High8.2
• CVE-2026-101896

  Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)

  angular · angular

  High8.2
• CVE-2026-101897

  Angular DevTools (Local DoS)

  angular · angular

  Medium5.1
• CVE-2026-101895

  Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

  angular · angular

  High8.7
• CVE-2026-104871

  Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

  angular · angular-cli

  Medium6.3
• CVE-2026-88060

  Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

  angular · angular

  High8.6
• CVE-2026-88059

  Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`

  angular · angular

  Medium4.0