VulnSea

angular has 28 CVEs on record. Cadence is steady at roughly 15 per quarter. The busiest recent month was June 2026 with 13. The median CVSS is 6.1 (medium), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (10) and CWE-400 (6). Most affected products: angular (6), @angular/common (5), @angular/platform-server (5).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
6.1
Publish → KEV
—
Last 90 days
15 prev 13

Products

  • angular 6
  • @angular/common 5
  • @angular/platform-server 5
  • @angular/core 3
  • @angular/router 3
  • @angular/service-worker 3
Follow angular:RSS feedSave a search →Embed badge ↗
28
Total CVEs
1
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

angular vulnerabilities

CVEs affecting angular, newest first. Open any entry for full detail, references, and exploit status.

28 CVEsRSS

CVE-2026-111753Medium
1w ago

@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

▾ Sunlitangular · @angular/commonvia GHSA
CVE-2026-111751High
1w ago

@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

▾ Twilightangular · @angular/routervia GHSA
CVE-2026-111754Medium
1w ago

@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)

@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)

▾ Sunlitangular · @angular/platform-servervia GHSA
CVE-2026-111752High
1w ago

@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

▾ Twilightangular · @angular/routervia GHSA
CVE-2026-101897Medium· 5.1
1w ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessa…

▾ Sunlitangular · angularEPSS 0.35%via NVD
CVE-2026-101896High· 8.2
1w ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter nam…

▾ Twilightangular · @angular/routerEPSS 0.76%via NVD
CVE-2026-101895High· 8.7PoC
1w ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an inf…

▾ Midnightangular · @angular/platform-serverEPSS 0.87%via NVD
CVE-2026-104871Medium· 6.3
3w ago

The Angular SSR is a server-rise rendering tool for Angular applications

The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prerendered-page retrieval logic in @angular/ssr/node, and in @angular/ssr for ver…

▾ Sunlitangular · angular-cliEPSS 0.42%via NVD
CVE-2026-88057Medium· 6.1
1mo ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compi…

▾ Sunlitangular · angularEPSS 0.37%via NVD
CVE-2026-88059Medium· 4.0
1mo ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's @angular/common HttpTransferCache can cache an authentic…

▾ Sunlitangular · angularEPSS 0.34%via NVD
CVE-2026-88056Critical· 9.1PoC
1mo ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processe…

▾ Abyssalangular · angularEPSS 0.54%via NVD
CVE-2026-88058Medium· 6.1PoC⚖ disputed
1mo ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server se…

▾ Twilightangular · angularEPSS 0.28%via NVD
CVE-2026-88060Medium· 6.1PoC⚖ disputed
1mo ago

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server se…

▾ Twilightangular · angularEPSS 0.36%via NVD
CVE-2026-69149High
2mo ago

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

▾ Twilightangular · @angular/platform-serverEPSS 0.42%via GHSA
CVE-2026-69151High
2mo ago

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

▾ Twilightangular · @angular/compilerEPSS 0.33%via GHSA
CVE-2026-54267High
4mo ago

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

▾ Twilightangular · @angular/coreEPSS 0.38%via GHSA
CVE-2026-50168High
4mo ago

@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass

@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass

▾ Twilightangular · @angular/platform-serverEPSS 0.24%via GHSA
CVE-2026-50169Medium
4mo ago

Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

▾ Sunlitangular · @angular/service-workerEPSS 0.23%via GHSA
CVE-2026-52725Medium
4mo ago

@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

▾ Sunlitangular · @angular/coreEPSS 0.46%via GHSA
CVE-2026-50170High
4mo ago

@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

▾ Twilightangular · @angular/commonEPSS 0.43%via GHSA
CVE-2026-50171High
4mo ago

@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

▾ Twilightangular · @angular/commonEPSS 0.26%via GHSA
CVE-2026-50184Medium
4mo ago

@angular/service-worker: Request Credential & Cache Policy Stripping

@angular/service-worker: Request Credential & Cache Policy Stripping

▾ Sunlitangular · @angular/service-workerEPSS 0.21%via GHSA
CVE-2026-50555High
4mo ago

@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

▾ Twilightangular · @angular/platform-serverEPSS 0.27%via GHSA
CVE-2026-50557Medium
4mo ago

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

▾ Sunlitangular · @angular/coreEPSS 0.41%via GHSA
CVE-2026-54265Medium
4mo ago

@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)

@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)

▾ Sunlitangular · @angular/compilerEPSS 0.34%via GHSA
CVE-2026-54266High
4mo ago

@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

▾ Twilightangular · @angular/commonEPSS 0.13%via GHSA
CVE-2026-54268High
4mo ago

@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

▾ Twilightangular · @angular/commonEPSS 0.58%via GHSA
CVE-2026-54264High
4mo ago

@angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker

@angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker

▾ Twilightangular · @angular/service-workerEPSS 0.39%via GHSA
angular vulnerabilities (CVEs) · VulnSea