@angular/router vulnerabilities
CVEs whose affected-version data names the @angular/router package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-111751High@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)
@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)
▾ Twilightangular · @angular/routervia GHSA
CVE-2026-111752High@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
▾ Twilightangular · @angular/routervia GHSA
CVE-2026-101896High· 8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter nam…
▾ Twilightangular · @angular/routerEPSS 0.76%via NVD