PT-2026-131113

TuxCare rebuilt @angular/platform-server to address 18 CVEs. Fixed in 17.1.0-tuxcare.2...

PT-2026-131246

TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 15.0.3-tuxcare.8...

PT-2026-131309

TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 11.2.14-tuxcare.8...

PT-2026-131345

TuxCare rebuilt @angular/platform-server to address 2 CVEs. Fixed in 8.0.3-tuxcare.4...

PT-2026-131241

TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 12.2.0-tuxcare.7...

PT-2026-131171

TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 12.2.16-tuxcare.6...

Linux Distros Unpatched Vulnerability : CVE-2026-101895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, a...

DEBIAN-CVE-2026-101895

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

CVE-2026-101895

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

CVE-2026-101895 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

@cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) potentially affected by CVE-2026-101895 via @angular/platform-server (18.2.13)

@angular/platform-server NPM version 18.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @cosla/sensemaking-web-ui =1.0.0, =1.0.4 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@landsoft/wng-auth-module (>=1.0.0, <=1.0.4), anb-forms (>=1.2.0, <=1.3.0) +11 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=5.2.0, <=5.2.10)

@angular/platform-server NPM version =5.2.0, =1.0.0, =1.2.0, =1.2.1, =3.0.0, =5.0.1, =1.0.6, =0.0.57, =0.0.1, =0.0.0, =0.0.11 - wng-id-components 1.0.2 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

angular-store-locator (>=0.0.1, <=0.1.0), angular5-canvas-drawer (1.6.5) +2 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=8.2.0, <=8.2.12)

@angular/platform-server NPM version =8.2.0, =0.0.1, =1.0.135, =2.0.20 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@nk-spirit/nk-ngx-bootstrap (7.1.16) potentially affected by CVE-2026-101895 via @angular/platform-server (11.2.0)

@angular/platform-server NPM version 11.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @nk-spirit/nk-ngx-bootstrap 7.1.16 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

CVE-2026-101895 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

EUVD-2026-101126

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

CVE-2026-101895 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

CVE-2026-101895

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering...

@hmcts/annotation-ui (1.0.0), @hmcts/annotation-ui-lib (>=1.0.1, <=1.0.2-RC) +10 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=6.1.0, <=6.1.9)

@angular/platform-server NPM version =6.1.0, =1.0.1, =1.1.8-bata.1, =2.0.0, =1.23.14, =1.0.634, =1.0.635 - shivs-angular5-painter 1.1.0 - totvs-thf2-components 0.0.2 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

@flowaccount/scullyio (1.0.0), @flowaccount/scullyio-scully (>=2.0.0, <=2.0.14) +21 more potentially affected by CVE-2026-101895 via @angular/platform-server (>=12.2.6, <=12.2.15)

@angular/platform-server NPM version =12.2.6, =2.0.0, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.32, =2.1.41 and more Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...