@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.201-alpha) +51 more potentially affected by CVE-2026-50171 via @angular/common (>=21.0.0, <=21.2.14)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-50171 Source advisory: OSV:GHSA-P3VC-36G9-X9GR...

@agilie/widget-template (>=1.0.2, <=1.1.6), @aipeel/mat-currency-field (3.18.0) +389 more potentially affected by CVE-2026-50171 via @angular/common (>=18.0.0, <=18.2.14)

@angular/common NPM version =18.0.0, =1.0.2, =0.0.0, =1.0.0, =0.0.55, =1.0.0, =7.0.0, =5.0.512-alpha, =5.0.545-alpha, =5.0.557-alpha and more Source cves: CVE-2026-50171 Source advisory: OSV:GHSA-P3VC-36G9-X9GR...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2026-50171 via @angular/common (>=19.0.0, <=19.2.20)

@angular/common NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-50171 Source advisory:...

@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.201-alpha) +51 more potentially affected by CVE-2026-50171 via @angular/common (>=21.0.0, <=21.2.14)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-50171 Source advisory: SNYK:JS-ANGULARCOMMON-17353316...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the formatNumber function when the digitsInfo parameter is controlled by untrusted user input. An attacker can exhaust system resources and cause application unavailability by...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2026-50171 via @angular/common (>=19.0.0, <=19.2.20)

@angular/common NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-50171 Source advisory:...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-50171 via @angular/common (>=20.0.0, <=20.3.21)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-50171 Source advisory: OSV:GHSA-P3VC-36G9-X9GR...

@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

A Denial of Service DoS vulnerability exists in the @angular/common package of Angular. The formatNumber function, which is also utilized by DecimalPipe, PercentPipe, and CurrencyPipe, does not properly validate the upper bounds of the digitsInfo parameter. Specifically, the minimum and maximum...

GHSA-P3VC-36G9-X9GR @angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

A Denial of Service DoS vulnerability exists in the @angular/common package of Angular. The formatNumber function, which is also utilized by DecimalPipe, PercentPipe, and CurrencyPipe, does not properly validate the upper bounds of the digitsInfo parameter. Specifically, the minimum and maximum...

Use of Cache Containing Sensitive Information

Overview Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via the HttpTransferCache utility. An attacker can access sensitive user-specific information by making requests to pages that have been cached by a shared caching layer after another user h...

@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.201-alpha) +51 more potentially affected by CVE-2026-50170 via @angular/common (>=21.0.0, <=21.2.14)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-50170 Source advisory: OSV:GHSA-Q6F4-QQRG-JV6X...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2026-50170 via @angular/common (>=19.0.0, <=19.2.20)

@angular/common NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-50170 Source advisory:...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-50170 via @angular/common (>=20.0.0, <=20.3.21)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-50170 Source advisory: SNYK:JS-ANGULARCOMMON-17356499...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2026-50170 via @angular/common (>=19.0.0, <=19.2.20)

@angular/common NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-50170 Source advisory:...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-50170 via @angular/common (>=20.0.0, <=20.3.21)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-50170 Source advisory: OSV:GHSA-Q6F4-QQRG-JV6X...

@agilie/widget-template (>=1.0.2, <=1.1.6), @aipeel/mat-currency-field (3.18.0) +389 more potentially affected by CVE-2026-50170 via @angular/common (>=18.0.0, <=18.2.14)

@angular/common NPM version =18.0.0, =1.0.2, =0.0.0, =1.0.0, =0.0.55, =1.0.0, =7.0.0, =5.0.512-alpha, =5.0.545-alpha, =5.0.557-alpha and more Source cves: CVE-2026-50170 Source advisory: OSV:GHSA-Q6F4-QQRG-JV6X...

@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.201-alpha) +51 more potentially affected by CVE-2026-50170 via @angular/common (>=21.0.0, <=21.2.14)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-50170 Source advisory: SNYK:JS-ANGULARCOMMON-17356499...

@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

A vulnerability was discovered in @angular/common when Server-Side Rendering SSR and hydration are enabled. The HttpTransferCache utility optimizes hydration by caching outgoing HTTP requests performed during SSR and transferring the cached state to the client-side application via TransferState...

@agdo/object-model (>=1.0.1, <=1.2.34), @agilie/widget-template (>=1.0.2, <=1.1.6) +415 more potentially affected by CVE-2026-52725 via @angular/core (>=18.0.0, <=18.2.14)

@angular/core NPM version =18.0.0, =1.0.1, =1.0.2, =0.0.0, =1.0.0, =0.0.55, =1.0.0, =18.2.0, =7.0.0, =7.0.3 - @auscope/angular2parse 18.0.0 and more Source cves: CVE-2026-52725 Source advisory: OSV:GHSA-692R-GRFM-V8X7...

@ammar_sk/shared-lib (0.0.4), @angulartoolsdr/control-material (>=20.0.3, <=20.2.4) +43 more potentially affected by CVE-2026-52725 via @angular/core (>=20.0.0, <=20.3.21)

@angular/core NPM version =20.0.0, =20.0.3, =20.0.6, =20.0.6, =5.1.121, =5.1.121, =261.20.7, =261.1.1, =261.1.5, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - @getflip/swirl-components-angular 0.472.0-beta-20260406102253 and more Source cves:...