High
CVE-2026-50556
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 84
Reset filters
High
CVE-2026-50555
@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Medium
CVE-2026-50184
@angular/service-worker: Request Credential & Cache Policy Stripping
High
CVE-2026-50171
@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)
High
CVE-2026-50170
@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache
Medium
CVE-2026-52725
@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)
Medium
CVE-2026-50169
Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities
High
CVE-2026-50168
@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass
High
CVE-2026-54267
Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
High
CVE-2026-46417
@angular/platform-server: SSRF via Hostname Hijacking
Critical
CVE-2026-44643
Angular Expressions - Remote Code Execution using filters
Medium
CVE-2026-44437
Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix
High
ghsa-g485-8j3v-p6x8
@tdurieux/anonymous_github Vulnerable to XSS via Unsanitized GitHub Repository Content Rendering in Anonymous GitHub Origin
High
CVE-2026-41423
Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
Medium
CVE-2026-33397
Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR
High
CVE-2026-32635
Angular vulnerable to XSS in i18n attribute bindings
High
CVE-2026-27970
Angular i18n vulnerable to Cross-Site Scripting
Critical
CVE-2026-27739
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
Medium
CVE-2026-27738
Angular SSR has an Open Redirect via X-Forwarded-Prefix
High
CVE-2026-22610
Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
High
CVE-2025-66412
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
High
CVE-2025-66035
Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client
High
CVE-2025-62427
Angular SSR has a Server-Side Request Forgery (SSRF) flaw
High
CVE-2025-59052
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.