Angular security vulnerabilities
Developer framework / library. Public CVE monitoring for Angular. Vendor security advisories are linked on this page.
Built for Operators of this product.
30 public records · 0 security-fix timeline events. 0 published in the last 7 days. 26 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 6
- Medium 4
- Low 0
2026-08-0610 issues2026-11-03
Known exploited
View all known exploitedRecently published
Browse catalog- Medium@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)Open the advisoryOct 20, 2026
- High@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)Open the advisoryOct 1, 2026
- HighDenial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)Open the advisorySep 30, 2026
- MediumOpen RedirectOpen the advisorySep 30, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.91%Sep 23, 2026
- Medium5.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.35%Sep 16, 2026
- High8.7Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.87%Sep 9, 2026
- HighSSR XSS via Unescaped Processing Instruction ( ) Nodes in Fallback Raw-Content ElementsCheck if you run itEPSS 0.28%Aug 27, 2026
- HighSSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSRCheck if you run itEPSS 0.54%Aug 27, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.20%May 13, 2026