en
Angular is an open-source web framework and development platform maintained by Google. It is designed for building fast, reliable web applications with TypeScript and JavaScript. The platform includes reusable components, dependency injection, routing, forms, internationalization, build tooling, security mechanisms, server-side rendering, static generation, and hydration for individual developers, teams, and large organizations.
As of 11/08/2026, angular recorded 13 security vulnerabilities in the last 90 days across 5 products, including 7 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, angular had the most security vulnerabilities in the angular ecosystem, with 12 vulnerabilities—approximately 92.31% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-111753Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)CVE-2026-111754Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)CVE-2026-111752Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)CVE-2026-111751Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)CVE-2026-101897Angular DevTools (Local DoS)| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-111753Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) | Exploitation statusNot confirmed | FixYes |
| Affected productangular |
| Published11/05/2026 |
| SeverityMedium |
CVE-2026-111754Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR) | Exploitation statusNot exploited | FixYes | Affected productangular | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-111752Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR) | Exploitation statusNot confirmed | FixYes | Affected productangular | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-111751Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR) | Exploitation statusNot confirmed | FixYes | Affected productangular | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-101897Angular DevTools (Local DoS) | Exploitation statusNot exploited | FixYes | Affected productangular | Published10/14/2026 | SeverityMedium |
|---|
CVE-2026-101896Angular @angular/router SSR enables Node.js heap exhaustion | Exploitation statusNot exploited | FixYes | Affected productangular | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-101895Infinite-loop denial of service in Angular Server-Side Rendering | Exploitation statusActively exploited | FixYes | Affected productangular | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-104871Path traversal exposes sibling prerendered pages in Angular SSR | Exploitation statusNot exploited | FixYes | Affected productangular-cli | Published10/02/2026 | SeverityMedium |
|---|
CVE-2026-88060Angular SSR XSS from unescaped template content in @angular/platform-server | Exploitation statusActively exploited | FixYes | Affected productangular | Published09/10/2026 | SeverityHigh |
|---|
CVE-2026-88059Angular @angular/common HttpTransferCache exposes authenticated SSR data through shared HTML caches | Exploitation statusActively exploited | FixYes | Affected productangular | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-88058Angular @angular/platform-server SSR escaping flaw enables cross-site scripting | Exploitation statusActively exploited | FixYes | Affected productangular | Published09/10/2026 | SeverityHigh |
|---|
CVE-2026-88057Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler | Exploitation statusNot exploited | FixYes | Affected productangular | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-88056Angular @angular/platform-server SSRF and cross-origin credential disclosure through URL resolution | Exploitation statusActively exploited | FixYes | Affected productangular | Published09/10/2026 | SeverityHigh |
|---|
CVE-2026-69151Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes | Exploitation statusNot exploited | FixYes | Affected productangular | Published08/03/2026 | SeverityHigh |
|---|
CVE-2026-69149Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS) | Exploitation statusNot exploited | FixYes | Affected productangular | Published08/03/2026 | SeverityHigh |
|---|
CVE-2026-68945Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning | Exploitation statusNot exploited | FixYes | Affected productangular | Published08/03/2026 | SeverityHigh |
|---|
CVE-2026-54268Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate) | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-54267Angular Client Hydration DOM Clobbering & Response-Cache Poisoning | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-54266Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-54265Angular: Two-Way Property Binding Sanitization Bypass (XSS) | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityMedium |
|---|
CVE-2026-54264Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-52725Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS) | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityMedium |
|---|
CVE-2026-50557Angular: Template and Attribute Namespace Sanitization Bypass (XSS) | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityMedium |
|---|
CVE-2026-50556Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-50555Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-server | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-50184Angular: Request Credential & Cache Policy Stripping in Angular Service Worker | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityMedium |
|---|
CVE-2026-50178Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-50171Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo) | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-50170Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-50169Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityMedium |
|---|
CVE-2026-50168Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-49241Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-46417Angular: SSRF via Hostname Hijacking in @angular/platform-server | Exploitation statusNot exploited | FixYes | Affected productangular | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-44437Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix | Exploitation statusNot exploited | FixNo | Affected productangular-cli | Published05/13/2026 | SeverityMedium |
|---|
CVE-2026-41423Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server | Exploitation statusNot exploited | FixYes | Affected productangular | Published05/08/2026 | SeverityHigh |
|---|
CVE-2026-33397Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass | Exploitation statusNot exploited | FixNo | Affected productangular-cli | Published03/26/2026 | SeverityMedium |
|---|
CVE-2026-32635Angular has XSS in i18n attribute bindings | Exploitation statusNot exploited | FixYes | Affected productcompiler | Published03/13/2026 | SeverityHigh |
|---|
CVE-2026-27970Angular i18n vulnerable to Cross-Site Scripting (XSS) | Exploitation statusNot exploited | FixNo | Affected productangular | Published02/26/2026 | SeverityHigh |
|---|
CVE-2026-27739Header-trust SSRF in Angular @angular/ssr enables internal request steering | Exploitation statusNot exploited | FixNo | Affected productangular-cli | Published02/25/2026 | SeverityCritical |
|---|
CVE-2026-27738Angular SSR has an Open Redirect via X-Forwarded-Prefix | Exploitation statusActively exploited | FixNo | Affected productangular-cli | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-22610Angular has XSS Vulnerability via Unsanitized SVG Script Attributes | Exploitation statusNot exploited | FixYes | Affected productangular | Published01/10/2026 | SeverityHigh |
|---|
CVE-2025-66412Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes | Exploitation statusNot exploited | FixYes | Affected productangular | Published12/01/2025 | SeverityHigh |
|---|
CVE-2025-66035Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs | Exploitation statusNot exploited | FixYes | Affected productangular | Published11/26/2025 | SeverityHigh |
|---|
CVE-2025-61261Reflected XSS in CKEditor and Angular enables browser-side code execution | Exploitation statusActively exploited | FixNo | Affected productangular | Published11/07/2025 | SeverityMedium |
|---|
CVE-2025-62427Server-Side Request Forgery in Angular SSR via Malicious URL Resolution | Exploitation statusActively exploited | FixYes | Affected productangular-cli | Published10/16/2025 | SeverityHigh |
|---|
CVE-2025-59052Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage | Exploitation statusNot exploited | FixYes | Affected productangular | Published09/10/2025 | SeverityHigh |
|---|
46 Results | Page 1 of 1