Angular vulnerabilities
45 CVEs and advisories name Angular as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-111753Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
- CVE-2026-111751Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)
- CVE-2026-111754Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
- CVE-2026-111752Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
- CVE-2026-101896Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
- CVE-2026-101897Angular DevTools (Local DoS)
- CVE-2026-101895Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE
- CVE-2026-104871Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows
- CVE-2026-88060Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements
- CVE-2026-88059Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`
- CVE-2026-88058Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
- CVE-2026-88057Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler
- CVE-2026-88056Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
- CVE-2026-69151Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
- CVE-2026-69149Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
- CVE-2026-68945Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
- CVE-2026-50171Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)
- CVE-2026-50184Angular: Request Credential & Cache Policy Stripping in Angular Service Worker
- CVE-2026-50169Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities
- CVE-2026-46417Angular: SSRF via Hostname Hijacking in @angular/platform-server
- CVE-2026-50168Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass
- CVE-2026-50170Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache
- CVE-2026-50556Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR
- CVE-2026-50555Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-server
- CVE-2026-54264Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker
- CVE-2026-54268Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)
- CVE-2026-54267Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
- CVE-2026-54266Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning
- CVE-2026-54265Angular: Two-Way Property Binding Sanitization Bypass (XSS)
- CVE-2026-50178Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension