Known vulnerabilities in Angular

Vendor: Google
Software: Angular
Software CPE: cpe:2.3:a:google:angular:*:*:*:*:*:*:*:*
Total vulnerabilities: 36
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Angular Angular is affected by 36 known vulnerabilities: 4 high, 24 medium, 8 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153183 - Asymmetric Resource Consumption (Amplification)
CWE-405 Medium
No
No
20.3.33, 21.2.25, 22.2.1 02.10.2026 SB2026100234
#VU153182 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
21.2.25, 22.2.1 02.10.2026 SB2026100234
#VU153181 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
20.3.33, 21.2.25, 22.2.1 02.10.2026 SB2026100234
#VU151872 - Resource exhaustion
CWE-400 Medium
No
No
20.3.32, 21.2.24, 22.2.0 23.09.2026 SB2026092387
#VU149012 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Medium
No
No
20.3.31, 21.2.23, 22.1.6 11.09.2026 SB2026091148
#VU149011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54265
CWE-79 Medium
No
No
20.3.25, 21.2.17, 22.0.1 11.09.2026 SB2026091147
SB2026100514
#VU149010 - Use of Weak Hash
CVE-2026-54266
CWE-328 High
No
No
20.3.25, 21.2.17, 22.0.1 11.09.2026 SB2026091147
#VU149009 - Modification of Assumed-Immutable Data
CVE-2026-54267
CWE-471 Medium
No
No
20.3.25, 21.2.17, 22.0.1 11.09.2026 SB2026091147
#VU149008 - Inefficient Regular Expression Complexity
CVE-2026-54268
CWE-1333 Medium
No
No
20.3.25, 21.2.17, 22.0.1 11.09.2026 SB2026091147
#VU149007 - Exposure of sensitive information to an unauthorized actor
CVE-2026-54264
CWE-200 Medium
No
No
20.3.25, 21.2.17, 22.0.1 11.09.2026 SB2026091147
#VU149005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50556
CWE-79 Medium
No
No
19.2.25, 20.3.24, 21.2.16, 22.0.0 11.09.2026 SB2026091146
SB2026100513
#VU149004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50555
CWE-79 Medium
No
No
19.2.25, 20.3.24, 21.2.16, 22.0.0 11.09.2026 SB2026091146
#VU149003 - Excessive Iteration
CVE-2026-50171
CWE-834 Medium
No
No
19.2.23, 20.3.22, 21.2.15, 22.0.0 11.09.2026 SB2026082073
#VU149002 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-50169
CWE-441 Medium
No
No
19.2.23, 20.3.22, 21.2.15, 22.0.0 11.09.2026 SB2026082073
#VU149001 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-52725
CWE-79 Medium
No
No
19.2.23, 20.3.22, 21.2.15, 22.0.0 11.09.2026 SB2026082073
#VU149000 - Origin Validation Error
CVE-2026-50168
CWE-346 High
No
No
19.2.23, 20.3.22, 21.2.15, 22.0.0 11.09.2026 SB2026082073
SB2026100513
#VU148999 - Use of Cache Containing Sensitive Information
CVE-2026-50184
CWE-524 Medium
No
No
19.2.23, 20.3.22, 21.2.15, 22.0.0 11.09.2026 SB2026082073
#VU146537 - Server-Side Request Forgery (SSRF)
CVE-2026-88056
CWE-918 Medium
No
No
20.3.30, 21.2.22, 22.1.4 01.09.2026 SB2026090104
#VU146536 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-88058
CWE-79 Low
Available
No
20.3.30, 21.2.22, 22.1.4 01.09.2026 SB2026090104
#VU146535 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-88060
CWE-79 Low
Available
No
20.3.30, 21.2.22, 22.1.4 01.09.2026 SB2026090104


Showing elements 1 - 20 out of 36