Skip to content
Noroxi

angular records

29 published records for vendor angular.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
97.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

29 records
  • CVE-2026-46417
    35Monitor

    Angular: SSRF via Hostname Hijacking in @angular/platform-server

    HighCVSS 8.8No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-50168
    35Monitor

    Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass

    HighCVSS 8.8No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-68945
    35Monitor

    Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

    HighCVSS 8.8No exploitEPSS 0%

    angular · angularAug 3, 2026

  • CVE-2026-54266
    35Monitor

    Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

    HighCVSS 8.8No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-88058
    34Monitor

    Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

    HighCVSS 8.6No exploitEPSS 1%

    angular · angularSep 10, 2026

  • CVE-2026-88060
    34Monitor

    Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

    HighCVSS 8.6No exploitEPSS 1%

    angular · angularSep 10, 2026

  • CVE-2026-88056
    34Monitor

    Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

    HighCVSS 8.6No exploitEPSS 1%

    angular · angularSep 10, 2026

  • CVE-2026-50178
    34Monitor

    Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension

    HighCVSS 8.7No exploitEPSS 1%

    angular · angular language serviceJun 22, 2026

  • CVE-2026-32635
    34Monitor

    Angular has XSS in i18n attribute bindings

    HighCVSS 8.6Proof of conceptEPSS 0%

    angular · angular cliMar 16, 2026

  • CVE-2026-41423
    34Monitor

    Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

    HighCVSS 8.7No exploitEPSS 0%

    angular · angularMay 8, 2026

  • CVE-2026-22610
    34Monitor

    Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

    HighCVSS 8.5Proof of conceptEPSS 0%

    angular · angularJan 10, 2026

  • CVE-2025-66412
    34Monitor

    Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

    HighCVSS 8.5No exploitEPSS 0%

    angular · angularDec 1, 2025

  • CVE-2026-50556
    34Monitor

    Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR

    HighCVSS 8.6No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-69149
    34Monitor

    Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

    HighCVSS 8.6No exploitEPSS 0%

    angular · angularAug 3, 2026

  • CVE-2026-54267
    34Monitor

    Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

    HighCVSS 8.6No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-50555
    34Monitor

    Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-server

    HighCVSS 8.6No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-49241
    34Monitor

    Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension

    HighCVSS 8.7No exploitEPSS 0%

    angular · angular language serviceJun 22, 2026

  • CVE-2026-54264
    33Monitor

    Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker

    HighCVSS 8.3No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-54268
    32Monitor

    Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

    HighCVSS 8.2No exploitEPSS 1%

    angular · angularJun 22, 2026

  • CVE-2026-50170
    32Monitor

    Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

    HighCVSS 8.2No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-50171
    32Monitor

    Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

    HighCVSS 8.2No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-27970
    30Monitor

    Angular i18n vulnerable to Cross-Site Scripting (XSS)

    HighCVSS 7.6No exploitEPSS 0%

    angular · angularFeb 25, 2026

  • CVE-2026-69151
    30Monitor

    Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

    HighCVSS 7.6No exploitEPSS 0%

    angular · angularAug 3, 2026

  • CVE-2026-33397
    27Monitor

    Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass

    MediumCVSS 6.9No exploitEPSS 0%

    angular · angular cliMar 26, 2026

  • CVE-2026-44437
    27Monitor

    Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

    MediumCVSS 6.9No exploitEPSS 0%

    angular · angular cliMay 13, 2026