CLSA-2026-1792163491 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 15.2.10-tuxcare.2...

CLSA-2026-1792163490 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 14.3.0-tuxcare.4...

CLSA-2026-1792163481 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 9.1.13-tuxcare.6...

CLSA-2026-1792163480 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 9.1.13-tuxcare.4...

CLSA-2026-1792163470 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 18.2.14-tuxcare.1...

CLSA-2026-1792163468 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 14.3.0-tuxcare.1...

CLSA-2026-1792160993 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 9.1.13-tuxcare.16...

CLSA-2026-1792160984 TuxCare security update for @angular/router (14 CVEs)

TuxCare rebuilt @angular/router to address 14 CVEs. Fixed in 16.2.12-tuxcare.11...

CLSA-2026-1792160982 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 5.2.7-tuxcare.1...

CLSA-2026-1792160980 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 14.3.0-tuxcare.5...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by CVE-2026-101896 via @angular/router (>=22.0.0, <=22.1.8)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-101896 Source advisory: MEND:CVE-2026-101896...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +32 more potentially affected by CVE-2026-101896 via @angular/router (>=20.0.0, <=20.3.25)

@angular/router NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.0.60 and more Source cves: CVE-2026-101896 Source advisory: MEND:CVE-2026-101896...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

Denial Of Service (DoS)

@angular/router is vulnerable to Denial Of Service DoS. The vulnerability is due to inefficient handling of numeric matrix parameter and outlet names that causes excessive memory allocation for JavaScript objects, which allows a remote attacker to craft malicious URLs that trigger significant...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by unknown CVE via @angular/router (>=22.0.0, <=22.2.0)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0112...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +32 more potentially affected by CVE-2026-101896 via @angular/router (>=20.0.0, <=20.3.25)

@angular/router NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.0.60 and more Source cves: CVE-2026-101896 Source advisory: GHSA-FF3F-86QR-9CV3...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +32 more potentially affected by CVE-2026-101896 via @angular/router (>=20.0.0-rc.0, <=20.3.25)

@angular/router NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.0.60 and more Source cves: CVE-2026-101896 Source advisory: SNYK:JS-ANGULARROUTER-20361514...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +280 more potentially affected by CVE-2026-101896 via @angular/router (>=19.0.0-next.9, <=19.2.25)

@angular/router NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =3.0.0, =1.0.0, =0.1.1, =5.0.559-alpha, =5.0.559-alpha, =5.1.670-alpha and more Source cves: CVE-2026-101896 Source advisory: GHSA-FF3F-86QR-9CV3...