[ Vendor · 7 CVEs ]
angular
CVEs affecting angular published in the last 30 days, plus any angular CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101896 | 14 Oct 2026 | CVSS 8.2 | Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix ParametersAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32… | Fix |
| CVE-2026-101896 | 14 Oct 2026 | CVSS 8.2 | Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix ParametersAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32… | Fix |
| CVE-2026-101897 | 14 Oct 2026 | CVSS 5.1 | angularAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until… | |
| CVE-2026-101895 | 14 Oct 2026 | CVSS 8.7 | Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPEAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31… | Fix |
| CVE-2026-101895 | 14 Oct 2026 | CVSS 8.7 | Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPEAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31… | Fix |
| CVE-2026-104871 | 2 Oct 2026 | CVSS 6.3 | Angular SSR: Path Traversal to Sibling Directories in CommonEngine on WindowsThe Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine… | Fix |
| CVE-2026-88058 | 10 Sep 2026 | CVSS 8.6 | Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content ElementsAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30… | Fix |