WS-2026-0112

@angular/router 21.2.0 before 21.2.25 and 22.0.0 before 22.2.1: RouterLink retains and re-serializes attacker-controlled query parameters in its cached UrlTree, so with SSR a crafted request causes excessive memory and CPU use denial of service. GHSA-57xq-rjx2-v5xh...