CVE-2025-59052

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as ...

@angularexpert/my-workspace (0.0.0), @cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) +47 more potentially affected by CVE-2025-59052 via @angular/platform-server (>=16.2.12, <=18.2.13)

@angular/platform-server NPM version =16.2.12, =1.0.0, =0.0.1, =1.4.1, =1.1.1, =0.1.0, =13.1.0, =0.0.0, =2.1.0, =0.0.2, =0.0.11 and more Source cves: CVE-2025-59052 Source advisory: MEND:CVE-2025-59052...

super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)

@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory: MEND:CVE-2025-59052...

CVE-2025-59052: Concurrent Execution using Shared Resource with Improper Synchronization

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as ...

@proactive-as/angular.vendor (8.0.0), @ts-core/frontend (>=1.0.1, <=1.0.5) +6 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=8.0.0, <=8.2.12)

@angular/platform-server NPM version =8.0.0, =1.0.1, =1.0.5, =0.0.1, =1.0.135, =2.0.20 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@mxtommy/kip (>=1.1.1, <=1.1.2), angular-nest-starter (0.1.0) +4 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=9.0.0, <=9.1.11)

@angular/platform-server NPM version =9.0.0, =1.1.1, =0.0.0, =0.0.1 - jio-digiapi-auto-mate-plus-ui-app 1.2.0 - node-angular-app-template 0.0.1 - shared-encoding-library 0.0.0 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@amicus/auth (>=1.0.3, <=1.1.5), @amicus/broadcasting (>=1.0.3, <=1.1.5) +149 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=4.0.0, <=4.4.6)

@angular/platform-server NPM version =4.0.0, =1.0.3, =1.0.3, =1.0.3, =1.1.1, =3.0.0-beta.45, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.0, =0.2.1, =0.2.1, =2.0.2, =0.0.1, =0.0.21 - @kouki-o/angular-custom-tour 0.0.19 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@dometec/ng2-smart-table-demo (1.3.5-dom), @easybi/ng2-smart-table (1.4.1) +23 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=6.0.0, <=6.1.9)

@angular/platform-server NPM version =6.0.0, =1.0.1, =2.0.0, =0.0.46, =1.1.8-bata.1, =5.1.0, =2.0.0, =0.0.0, =1.23.7, =1.23.20 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@mxtommy/kip (>=0.1.9, <=1.0.3), @proactive-as/angular.vendor (>=7.0.0-beta.1, <=7.2.13) +5 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=7.0.4, <=7.2.13)

@angular/platform-server NPM version =7.0.4, =0.1.9, =7.0.0-beta.1, =0.0.71, =0.0.2, =0.1.1, =1.2.1-beta.777, =0.0.1-1.1, =0.0.111 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@daybreaksoft/angular-elastic-ui (>=1.0.0-beta.1, <=5.0.0-beta.3), @landsoft/wng-auth-module (>=1.0.0, <=1.0.4) +33 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=5.0.0, <=5.2.10)

@angular/platform-server NPM version =5.0.0, =1.0.0-beta.1, =1.0.0, =0.0.8-hotfix-6, =1.2.0, =1.2.1, =1.0.0, =1.0.0, =0.41.0, =0.50.0 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...