Angularjs

This hub aggregates every CVE we track for Angularjs, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Angularjs.

• CVE-2026-11998AngularJS XSS via SCE resource URL sanitization bypass7.6Jun 24, 2026
• CVE-2026-50171Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)6.1Jun 22, 2026
• CVE-2026-50184Angular: Request Credential & Cache Policy Stripping in Angular Service Worker6.1Jun 22, 2026
• CVE-2026-50169Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities6.1Jun 22, 2026
• CVE-2026-46417Angular: SSRF via Hostname Hijacking in @angular/platform-server6.1Jun 22, 2026
• CVE-2026-50168Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass8.2Jun 22, 2026
• CVE-2026-50170Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache7.5Jun 22, 2026
• CVE-2026-50556Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR6.1Jun 22, 2026
• CVE-2026-50555Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-server6.1Jun 22, 2026
• CVE-2026-54264Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker6.1Jun 22, 2026
• CVE-2026-54268Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)7.5Jun 22, 2026
• CVE-2026-54267Angular Client Hydration DOM Clobbering & Response-Cache Poisoning6.1Jun 22, 2026
• CVE-2026-54266Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning6.1Jun 22, 2026
• CVE-2026-54265Angular: Two-Way Property Binding Sanitization Bypass (XSS)6.1Jun 22, 2026
• CVE-2026-52725Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)6.1Jun 22, 2026