CLSA-2026-1792163524 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 12.2.16-tuxcare.1...

CLSA-2026-1792163522 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 12.2.0-tuxcare.1...

CLSA-2026-1792163521 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 18.1.2-tuxcare.1...

CLSA-2026-1792163520 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 15.2.9-tuxcare.1...

CLSA-2026-1792163519 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 13.3.0-tuxcare.1...

CLSA-2026-1792163518 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 15.2.6-tuxcare.1...

CLSA-2026-1792163517 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 16.2.7-tuxcare.1...

CLSA-2026-1792163497 TuxCare security update for @angular/router (2 CVEs)

TuxCare rebuilt @angular/router to address 2 CVEs. Fixed in 17.3.12-tuxcare.3...

CLSA-2026-1792163494 TuxCare security update for @angular/router (2 CVEs)

TuxCare rebuilt @angular/router to address 2 CVEs. Fixed in 16.2.12-tuxcare.2...

CLSA-2026-1792163491 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 15.2.10-tuxcare.2...

CLSA-2026-1792163470 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 18.2.14-tuxcare.1...

CLSA-2026-1792163468 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 14.3.0-tuxcare.1...

CLSA-2026-1792160982 TuxCare security update for @angular/router (1 CVE)

TuxCare rebuilt @angular/router to address 1 CVE. Fixed in 5.2.7-tuxcare.1...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by CVE-2026-101896 via @angular/router (>=22.0.0, <=22.1.8)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: CVE-2026-101896 Source advisory: MEND:CVE-2026-101896...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +32 more potentially affected by CVE-2026-101896 via @angular/router (>=20.0.0, <=20.3.25)

@angular/router NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.0.60 and more Source cves: CVE-2026-101896 Source advisory: MEND:CVE-2026-101896...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

Denial Of Service (DoS)

@angular/router is vulnerable to Denial Of Service DoS. The vulnerability is due to inefficient handling of numeric matrix parameter and outlet names that causes excessive memory allocation for JavaScript objects, which allows a remote attacker to craft malicious URLs that trigger significant...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by unknown CVE via @angular/router (>=22.0.0, <=22.2.0)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0112...