@angular vulnerabilities

Newest CVEs

• CVE-2026-101896

  Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)

  angular · angular

  High8.2
• CVE-2026-69151

  Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

  angular · angular

  High7.6
• CVE-2026-69149

  Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

  angular · angular

  High8.6
• CVE-2026-68945

  Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

  angular · angular

  High8.8
• CVE-2026-32635

  Angular has XSS in i18n attribute bindings

  @angular · compiler

  High8.6