Angular 竞争条件问题漏洞

Angular is a development platform of Angular open source. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. Angular suffers from a Competing Conditions Issue vulnerability that stems from the possibility that DI containers may share or...

Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm)

The package cordelia-quasar-gravity-commitlint-config-angular was found to contain malicious code...

Malicious code in antimatter-commitlint-config-angular-archaeoastronomy-lint (npm)

The package antimatter-commitlint-config-angular-archaeoastronomy-lint was found to contain malicious code...

MAL-2025-43532 Malicious code in astrophysics-commitlint-config-angular-unuk-luna (npm)

The package astrophysics-commitlint-config-angular-unuk-luna was found to contain malicious code...

MAL-2025-43456 Malicious code in antimatter-commitlint-config-angular-archaeoastronomy-lint (npm)

The package antimatter-commitlint-config-angular-archaeoastronomy-lint was found to contain malicious code...

MAL-2025-43895 Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm)

The package cordelia-quasar-gravity-commitlint-config-angular was found to contain malicious code...

Malicious code in commitlint-config-angular-photon-plutology-bioinformatics (npm)

The package commitlint-config-angular-photon-plutology-bioinformatics was found to contain malicious code...

Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm)

The package heliophysics-comet-rollup-plugin-commitlint-config-angular was found to contain malicious code...

MAL-2025-46099 Malicious code in soap-commitlint-config-angular-adonis-cors (npm)

The package soap-commitlint-config-angular-adonis-cors was found to contain malicious code...

Malicious code in astrophysics-commitlint-config-angular-unuk-luna (npm)

The package astrophysics-commitlint-config-angular-unuk-luna was found to contain malicious code...

MAL-2025-43872 Malicious code in commitlint-config-angular-photon-plutology-bioinformatics (npm)

The package commitlint-config-angular-photon-plutology-bioinformatics was found to contain malicious code...

Malicious code in prettier-plugin-markdown-regulus-halley-commitlint-config-angular (npm)

The package prettier-plugin-markdown-regulus-halley-commitlint-config-angular was found to contain malicious code...

MAL-2025-44584 Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm)

The package heliophysics-comet-rollup-plugin-commitlint-config-angular was found to contain malicious code...

Malicious code in design-system-components-angular-workspace (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41967 Malicious code in design-system-components-angular-workspace (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

CVE-2025-50977

Gitblit (version 1.7.1) contains a template injection vulnerability that enables reflected XSS via the r parameter. Exploitation requires authenticated admin access and can be triggered through GET requests to the /summary endpoint or POST requests to certain Wicket interfaces, enabling injection...

Malicious code in @navancorp/angular-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94679c1658a3cfefa49daf06a90a50daeb480069b754976a6f72efa2e4e1d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41423 Malicious code in @navancorp/angular-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94679c1658a3cfefa49daf06a90a50daeb480069b754976a6f72efa2e4e1d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...