Exposure of Angular

JavaScript frameworks
52
exposure score
118,500
sites use
0
exploited
0
critical

CVEs

45 results
CVE-2022-25869MEDIUMAll versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to CroEPSS 7.7%CVE-2022-25844MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 4.9%CVE-2024-21490HIGHThis affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split thEPSS 1.9%CVE-2023-26118MEDIUMVersions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> elementEPSS 1.7%CVE-2023-26117MEDIUMVersions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to tEPSS 1.7%CVE-2023-26116MEDIUMVersions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility fuEPSS 1.7%CVE-2021-4231LOWAngular Comment cross site scriptingEPSS 1.2%CVE-2026-111752HIGHAngular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)EPSS 1.0%CVE-2026-111754MEDIUMAngular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)EPSS 1.0%CVE-2026-101896HIGHAngular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)EPSS 0.9%CVE-2026-101895HIGHAngular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPEEPSS 0.9%CVE-2025-66035HIGHAngular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLsEPSS 0.7%CVE-2026-111751HIGHAngular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)EPSS 0.7%CVE-2026-54268HIGHAngular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)EPSS 0.6%CVE-2026-27970HIGHAngular i18n vulnerable to Cross-Site Scripting (XSS)EPSS 0.5%CVE-2026-88056HIGHAngular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSREPSS 0.5%CVE-2026-111753MEDIUMAngular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)EPSS 0.5%CVE-2026-50178HIGHAngular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service ExtensionEPSS 0.5%CVE-2026-52725MEDIUMAngular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)EPSS 0.5%CVE-2026-22610HIGHAngular has XSS Vulnerability via Unsanitized SVG Script AttributesEPSS 0.4%