Race Condition

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Race Condition between multiple concurrent requests in the global platform injector, when using the bootstrapApplication, getPlatform, or destroyPlatform...

@angularexpert/my-workspace (0.0.0), @cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) +47 more potentially affected by CVE-2025-59052 via @angular/platform-server (>=16.2.12, <=18.2.13)

@angular/platform-server NPM version =16.2.12, =1.0.0, =0.0.1, =1.4.1, =1.1.1, =0.1.0, =13.1.0, =0.0.0, =2.1.0, =0.0.2, =0.0.11 and more Source cves: CVE-2025-59052 Source advisory: MEND:CVE-2025-59052...

super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)

@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory: MEND:CVE-2025-59052...

CVE-2025-59052

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as ...

CVE-2025-59052: Concurrent Execution using Shared Resource with Improper Synchronization

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as ...

@amicus/auth (>=1.0.3, <=1.1.5), @amicus/broadcasting (>=1.0.3, <=1.1.5) +149 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=4.0.0, <=4.4.6)

@angular/platform-server NPM version =4.0.0, =1.0.3, =1.0.3, =1.0.3, =1.1.1, =3.0.0-beta.45, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.0, =0.2.1, =0.2.1, =2.0.2, =0.0.1, =0.0.21 - @kouki-o/angular-custom-tour 0.0.19 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@daybreaksoft/angular-elastic-ui (>=1.0.0-beta.1, <=5.0.0-beta.3), @landsoft/wng-auth-module (>=1.0.0, <=1.0.4) +33 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=5.0.0, <=5.2.10)

@angular/platform-server NPM version =5.0.0, =1.0.0-beta.1, =1.0.0, =0.0.8-hotfix-6, =1.2.0, =1.2.1, =1.0.0, =1.0.0, =0.41.0, =0.50.0 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@dometec/ng2-smart-table-demo (1.3.5-dom), @easybi/ng2-smart-table (1.4.1) +23 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=6.0.0, <=6.1.9)

@angular/platform-server NPM version =6.0.0, =1.0.1, =2.0.0, =0.0.46, =1.1.8-bata.1, =5.1.0, =2.0.0, =0.0.0, =1.23.7, =1.23.20 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@mxtommy/kip (>=0.1.9, <=1.0.3), @proactive-as/angular.vendor (>=7.0.0-beta.1, <=7.2.13) +5 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=7.0.4, <=7.2.13)

@angular/platform-server NPM version =7.0.4, =0.1.9, =7.0.0-beta.1, =0.0.71, =0.0.2, =0.1.1, =1.2.1-beta.777, =0.0.1-1.1, =0.0.111 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@proactive-as/angular.vendor (8.0.0), @ts-core/frontend (>=1.0.1, <=1.0.5) +6 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=8.0.0, <=8.2.12)

@angular/platform-server NPM version =8.0.0, =1.0.1, =1.0.5, =0.0.1, =1.0.135, =2.0.20 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@mxtommy/kip (>=1.1.1, <=1.1.2), angular-nest-starter (0.1.0) +4 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=9.0.0, <=9.1.11)

@angular/platform-server NPM version =9.0.0, =1.1.1, =0.0.0, =0.0.1 - jio-digiapi-auto-mate-plus-ui-app 1.2.0 - node-angular-app-template 0.0.1 - shared-encoding-library 0.0.0 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...