Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-14000
  • npm/blocks-angular
 Malicious code in blocks-angular (npm) 5 days ago
  • No fix available
MAL-2026-12855
  • npm/bigops-watchdog-angular
 Malicious code in bigops-watchdog-angular (npm) 05 Aug
  • No fix available
MAL-2026-12332
  • npm/@zahlen/checkout-angular
 Malicious code in @zahlen/checkout-angular (npm) 05 Aug
  • No fix available
MAL-2026-12283
  • npm/tinkoff-ui-angular-addon-wysiwyg
 Malicious code in tinkoff-ui-angular-addon-wysiwyg (npm) 05 Aug
  • No fix available
GHSA-jj27-h5hq-8x99
  • npm/@angular/compiler
  • npm/@angular/core
 Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes 03 Aug
  • Fix available
  • Severity - 7.6 (High)
GHSA-vpx6-8pjr-4g3v
  • npm/@angular/platform-server
 Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS) 03 Aug
  • Fix available
  • Severity - 8.6 (High)
GHSA-jhpw-976m-542j
  • npm/@angular/common
 Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning 03 Aug
  • Fix available
  • Severity - 8.8 (High)
MAL-2026-11065
  • npm/swiper_angular
 Malicious code in swiper_angular (npm) 25 Jul
  • No fix available
MAL-2026-10498
  • npm/eslint-angular-react
 Malicious code in eslint-angular-react (npm) 13 Jul
  • No fix available
MAL-2026-6604
  • npm/@bodata/angular-client
 Malicious code in @bodata/angular-client (npm) 29 Jun
  • No fix available
GHSA-7x27-g8rg-x87w
  • npm/angular
 Angular's deprecated package has a Cross-Site Scripting issue 24 Jun
  • No fix available
  • Severity - 7.6 (High)
MAL-2026-6255
  • npm/fork-angular-daterangepicker
 Malicious code in fork-angular-daterangepicker (npm) 21 Jun
  • No fix available
GHSA-qxh6-94w6-9r5p
  • npm/@angular/service-worker
 @angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker 15 Jun
  • Fix available
  • Severity - 8.3 (High)
GHSA-48r7-hpm6-gfxm
  • npm/@angular/common
 @angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate) 15 Jun
  • Fix available
  • Severity - 8.2 (High)
GHSA-39pv-4j6c-2g6v
  • npm/@angular/common
 @angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning 15 Jun
  • Fix available
  • Severity - 8.8 (High)
GHSA-58w9-8g37-x9v5
  • npm/@angular/compiler
 @angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS) 15 Jun
  • Fix available
  • Severity - 5.3 (Medium)
Load more...