Angular vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
30 matching records
- Medium@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)Open the advisoryOct 20, 2026
- High@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)Open the advisoryOct 1, 2026
- HighDenial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)Open the advisorySep 30, 2026
- MediumOpen RedirectOpen the advisorySep 30, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.91%Sep 23, 2026
- Medium5.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.35%Sep 16, 2026
- High8.7Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.87%Sep 9, 2026
- HighSSR XSS via Unescaped Processing Instruction ( ) Nodes in Fallback Raw-Content ElementsCheck if you run itEPSS 0.28%Aug 27, 2026
- HighSSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSRCheck if you run itEPSS 0.54%Aug 27, 2026
- Medium4.0CVE-2026-88059 is listed by Information Leak via Bypass When Using.Check if you run itEPSS 0.34%Aug 20, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.20%May 13, 2026
- Critical9.3Angular Expressions provides expressions for the Angular.JS web framework as a standalone module.Check if you run itEPSS 0.48%May 11, 2026
- High8.7Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.30%May 8, 2026
- Critical9.3Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives.Check if you run itEPSS 0.39%Apr 22, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.26%Mar 26, 2026
- High8.6Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.47%Mar 16, 2026
- High7.6Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.55%Feb 26, 2026
- Critical9.2The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.55%Feb 25, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.35%Feb 25, 2026
- High8.5Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.44%Jan 10, 2026
- High8.5Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.38%Dec 1, 2025
- High7.7Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.72%Nov 26, 2025
- Medium5.4A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injectiCheck if you run itEPSS 0.29%Nov 7, 2025
- High8.7The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.43%Oct 16, 2025
- High7.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.36%Sep 10, 2025