İçeriğe atla
Noroxi

angular kayıtları

angular üreticisine ait 29 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%97,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 25
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

29 kayıt
  • CVE-2026-46417
    35İzleyin

    Angular: SSRF via Hostname Hijacking in @angular/platform-server

    YüksekCVSS 8,8İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-50168
    35İzleyin

    Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass

    YüksekCVSS 8,8İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-68945
    35İzleyin

    Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

    YüksekCVSS 8,8İstismar yokEPSS %0

    angular · angular3 Ağu 2026

  • CVE-2026-54266
    35İzleyin

    Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

    YüksekCVSS 8,8İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-88058
    34İzleyin

    Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

    YüksekCVSS 8,6İstismar yokEPSS %1

    angular · angular10 Eyl 2026

  • CVE-2026-88060
    34İzleyin

    Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

    YüksekCVSS 8,6İstismar yokEPSS %1

    angular · angular10 Eyl 2026

  • CVE-2026-88056
    34İzleyin

    Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

    YüksekCVSS 8,6İstismar yokEPSS %1

    angular · angular10 Eyl 2026

  • CVE-2026-50178
    34İzleyin

    Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension

    YüksekCVSS 8,7İstismar yokEPSS %1

    angular · angular language service22 Haz 2026

  • CVE-2026-32635
    34İzleyin

    Angular has XSS in i18n attribute bindings

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    angular · angular cli16 Mar 2026

  • CVE-2026-41423
    34İzleyin

    Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

    YüksekCVSS 8,7İstismar yokEPSS %0

    angular · angular8 May 2026

  • CVE-2026-22610
    34İzleyin

    Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    angular · angular10 Oca 2026

  • CVE-2025-66412
    34İzleyin

    Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

    YüksekCVSS 8,5İstismar yokEPSS %0

    angular · angular1 Ara 2025

  • CVE-2026-50556
    34İzleyin

    Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-69149
    34İzleyin

    Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular3 Ağu 2026

  • CVE-2026-54267
    34İzleyin

    Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-50555
    34İzleyin

    Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-server

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-49241
    34İzleyin

    Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension

    YüksekCVSS 8,7İstismar yokEPSS %0

    angular · angular language service22 Haz 2026

  • CVE-2026-54264
    33İzleyin

    Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker

    YüksekCVSS 8,3İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-54268
    32İzleyin

    Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

    YüksekCVSS 8,2İstismar yokEPSS %1

    angular · angular22 Haz 2026

  • CVE-2026-50170
    32İzleyin

    Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

    YüksekCVSS 8,2İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-50171
    32İzleyin

    Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

    YüksekCVSS 8,2İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-27970
    30İzleyin

    Angular i18n vulnerable to Cross-Site Scripting (XSS)

    YüksekCVSS 7,6İstismar yokEPSS %0

    angular · angular25 Şub 2026

  • CVE-2026-69151
    30İzleyin

    Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

    YüksekCVSS 7,6İstismar yokEPSS %0

    angular · angular3 Ağu 2026

  • CVE-2026-33397
    27İzleyin

    Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass

    OrtaCVSS 6,9İstismar yokEPSS %0

    angular · angular cli26 Mar 2026

  • CVE-2026-44437
    27İzleyin

    Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

    OrtaCVSS 6,9İstismar yokEPSS %0

    angular · angular cli13 May 2026