CVE-2025-59052: Concurrent Execution using Shared Resource with Improper Synchronization

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as ...

$resource service Regular Expression DoS

The vulnerability of the application development environment and the Angular single-page application platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

Application Development Environment Angular XSS

The vulnerability of the application development environment and the Angular single-page application platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

input[url] function DoS

The vulnerability of the inputurl function in the application development environment and the Angular platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

@totalapi/metrix-core (>=0.0.2, <=1.0.2) potentially affected by CVE-2021-4231 via @angular/platform-webworker (4.1.0)

@angular/platform-webworker NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-webworker and may be impacted: - @totalapi/metrix-core =0.0.2, =1.0.2 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@amicus/auth (>=1.0.3, <=1.1.5), @amicus/broadcasting (>=1.0.3, <=1.1.5) +504 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=4.0.0, <=4.4.6)

@angular/platform-browser NPM version =4.0.0, =1.0.3, =1.0.3, =1.0.3, =1.1.1, =2.8.2, =3.0.0-beta.45, =1.32.0-SNAPSHOT.20171018190510, =1.0.0, =0.0.64, =1.10.0, =2.0.0-rc.2, =1.10.1, =2.0.0-beta.8, =1.0.1, =0.2.1, =0.3.4 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@acaisoft/angular-azure-maps (>=0.0.3, <=0.0.11), @afelio/sprb-osiris-uikit (1.0.48) +340 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=5.0.0, <=5.2.10)

@angular/platform-browser NPM version =5.0.0, =0.0.3, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =0.0.2, =1.0.0-beta.1, =0.1.15, =1.0.0-alpha.55...

@abt-desk/apm (>=0.0.1, <=0.33.12), @abt-desk/rsc (>=0.1.3, <=0.1.124) +471 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=7.0.0, <=7.2.14)

@angular/platform-browser NPM version =7.0.0, =0.0.1, =0.1.3, =2.0.7, =1.0.0, =2.0.0, =9.25.1, =1.0.2-1.beta.1, =0.0.1, =0.0.1, =0.1.0 - @ekkuluri/sharedmodule 0.0.0 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@amicus/auth (>=1.0.3, <=1.1.5), @amicus/broadcasting (>=1.0.3, <=1.1.5) +446 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=4.0.0, <=4.4.6)

@angular/platform-browser-dynamic NPM version =4.0.0, =1.0.3, =1.0.3, =1.0.3, =1.1.1, =2.8.2, =3.0.0-beta.45, =1.32.0-SNAPSHOT.20171018190510, =1.0.0, =0.0.64, =1.10.0, =2.0.0-rc.2, =1.10.1, =2.0.0-beta.8, =1.0.1, =0.2.1, =0.3.4 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4...

@acaisoft/angular-azure-maps (>=0.0.12, <=1.0.0), @angular-materials/ngx-admin (>=1.0.0, <=1.0.1) +198 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=6.0.0, <=6.1.9)

@angular/platform-browser-dynamic NPM version =6.0.0, =0.0.12, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =0.0.5, =0.0.1, =2.0.0, =2.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@abt-desk/apm (>=0.0.1, <=0.33.12), @abt-desk/rsc (>=0.1.3, <=0.1.124) +458 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=7.0.0, <=7.2.14)

@angular/platform-browser-dynamic NPM version =7.0.0, =0.0.1, =0.1.3, =1.0.0, =2.0.0, =9.25.1, =1.0.2-1.beta.1, =0.0.1, =0.0.1, =0.0.1, =0.6.5 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@acaisoft/angular-azure-maps (>=0.0.12, <=1.0.0), @angular-materials/ngx-admin (>=1.0.0, <=1.0.1) +204 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=6.0.0, <=6.1.9)

@angular/platform-browser NPM version =6.0.0, =0.0.12, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =0.0.5, =0.0.1, =2.0.0, =2.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +467 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=8.0.0, <=8.2.13)

@angular/platform-browser NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =8.0.2, =7.0.0-internal-20190531-1650, =1.0.6, =1.0.30 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +270 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=9.0.0, <=9.1.12)

@angular/platform-browser NPM version =9.0.0, =1.0.0, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.3, =0.0.1, =5.1.4, =1.0.0, =1.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +463 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=8.0.0, <=8.2.13)

@angular/platform-browser-dynamic NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =1.0.6, =0.2.5, =0.6.8 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +256 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=9.0.0, <=9.1.12)

@angular/platform-browser-dynamic NPM version =9.0.0, =1.0.0, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.3, =0.0.1, =5.1.4, =1.0.0, =1.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@proactive-as/angular.vendor (8.0.0), @ts-core/frontend (>=1.0.1, <=1.0.5) +6 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=8.0.0, <=8.2.12)

@angular/platform-server NPM version =8.0.0, =1.0.1, =1.0.5, =0.0.1, =1.0.135, =2.0.20 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@mxtommy/kip (>=1.1.1, <=1.1.2), angular-nest-starter (0.1.0) +4 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=9.0.0, <=9.1.11)

@angular/platform-server NPM version =9.0.0, =1.1.1, =0.0.0, =0.0.1 - jio-digiapi-auto-mate-plus-ui-app 1.2.0 - node-angular-app-template 0.0.1 - shared-encoding-library 0.0.0 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@amicus/auth (>=1.0.3, <=1.1.5), @amicus/broadcasting (>=1.0.3, <=1.1.5) +149 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=4.0.0, <=4.4.6)

@angular/platform-server NPM version =4.0.0, =1.0.3, =1.0.3, =1.0.3, =1.1.1, =3.0.0-beta.45, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.0, =0.2.1, =0.2.1, =2.0.2, =0.0.1, =0.0.21 - @kouki-o/angular-custom-tour 0.0.19 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@dometec/ng2-smart-table-demo (1.3.5-dom), @easybi/ng2-smart-table (1.4.1) +23 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=6.0.0, <=6.1.9)

@angular/platform-server NPM version =6.0.0, =1.0.1, =2.0.0, =0.0.46, =1.1.8-bata.1, =5.1.0, =2.0.0, =0.0.0, =1.23.7, =1.23.20 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...