Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10498
  • npm/eslint-angular-react
 Malicious code in eslint-angular-react (npm) yesterday
  • No fix available
MAL-2026-6604
  • npm/@bodata/angular-client
 Malicious code in @bodata/angular-client (npm) 29 Jun
  • No fix available
MAL-2026-6255
  • npm/fork-angular-daterangepicker
 Malicious code in fork-angular-daterangepicker (npm) 21 Jun
  • No fix available
GHSA-qxh6-94w6-9r5p
  • npm/@angular/service-worker
 @angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker 15 Jun
  • Fix available
  • Severity - 8.3 (High)
GHSA-48r7-hpm6-gfxm
  • npm/@angular/common
 @angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate) 15 Jun
  • Fix available
  • Severity - 8.2 (High)
GHSA-39pv-4j6c-2g6v
  • npm/@angular/common
 @angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning 15 Jun
  • Fix available
  • Severity - 8.8 (High)
GHSA-58w9-8g37-x9v5
  • npm/@angular/compiler
 @angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS) 15 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-f3m7-gqxr-g87x
  • npm/@angular/compiler
  • npm/@angular/core
 Angular: Template and Attribute Namespace Sanitization Bypass (XSS) 15 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-gxx4-3xcv-f8qx
  • npm/@angular/platform-server
 @angular/platform-server: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR 15 Jun
  • Fix available
  • Severity - 8.6 (High)
GHSA-hqr9-c56f-3x7f
  • npm/@angular/platform-server
 @angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 15 Jun
  • Fix available
  • Severity - 8.6 (High)
GHSA-95qp-cmmw-mgqv
  • npm/@angular/service-worker
 @angular/service-worker: Request Credential & Cache Policy Stripping 15 Jun
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-p3vc-36g9-x9gr
  • npm/@angular/common
 @angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo) 15 Jun
  • Fix available
  • Severity - 8.2 (High)
GHSA-q6f4-qqrg-jv6x
  • npm/@angular/common
 @angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache 15 Jun
  • Fix available
  • Severity - 8.2 (High)
GHSA-692r-grfm-v8x7
  • npm/@angular/core
 @angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS) 15 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-gv2q-mqqv-365m
  • npm/@angular/service-worker
 Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities 15 Jun
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-xrxm-cp7j-8xf6
  • npm/@angular/platform-server
 @angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass 15 Jun
  • Fix available
  • Severity - 8.8 (High)
Load more...