ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-54268 via @angular/common (22.0.0)

@angular/common NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-54268 Source advisory: OSV:GHSA-48R7-HPM6-GFXM...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +307 more potentially affected by CVE-2026-54268 via @angular/common (>=19.0.0-next.9, <=19.2.25)

@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 - @aymendiva/angular-file-uploader 0.0.5 and more Source cves: CVE-2026-54268 Source advisory: OSV:GHSA-48R7-HPM6-GFXM...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +307 more potentially affected by CVE-2026-54268 via @angular/common (>=19.0.0-next.9, <=19.2.25)

@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 - @aymendiva/angular-file-uploader 0.0.5 and more Source cves: CVE-2026-54268 Source advisory: GHSA-48R7-HPM6-GFXM...

ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-54268 via @angular/common (22.0.0)

@angular/common NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-54268 Source advisory: SNYK:JS-ANGULARCOMMON-17356486...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +31 more potentially affected by CVE-2026-54268 via @angular/common (>=20.0.0-rc.0, <=20.3.21)

@angular/common NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-54268 Source advisory: GHSA-48R7-HPM6-GFXM...

GHSA-48R7-HPM6-GFXM @angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

A Denial of Service DoS vulnerability exists in the @angular/common package of the Angular framework. The formatDate function, which is also utilized by the standard Angular DatePipe, does not properly limit or validate the length of the format parameter. When parsing a maliciously crafted,...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +31 more potentially affected by CVE-2026-54268 via @angular/common (>=20.0.0-rc.0, <=20.3.21)

@angular/common NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-54268 Source advisory: SNYK:JS-ANGULARCOMMON-17356486...

@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

A Denial of Service DoS vulnerability exists in the @angular/common package of the Angular framework. The formatDate function, which is also utilized by the standard Angular DatePipe, does not properly limit or validate the length of the format parameter. When parsing a maliciously crafted,...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +31 more potentially affected by CVE-2026-54266 via @angular/common (>=20.0.0-rc.0, <=20.3.21)

@angular/common NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-54266 Source advisory: GHSA-39PV-4J6C-2G6V...

ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-54266 via @angular/common (22.0.0)

@angular/common NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-54266 Source advisory: GHSA-39PV-4J6C-2G6V...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +307 more potentially affected by CVE-2026-54266 via @angular/common (>=19.0.0-next.9, <=19.2.25)

@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 - @aymendiva/angular-file-uploader 0.0.5 and more Source cves: CVE-2026-54266 Source advisory: GHSA-39PV-4J6C-2G6V...

ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-54266 via @angular/common (22.0.0)

@angular/common NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-54266 Source advisory: OSV:GHSA-39PV-4J6C-2G6V...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash due to the use of a weak 32-bit hash in the HttpTransferCache. When a victim visits a crafted link containing the colliding parameter, the SSR process executes both the search request and the profile request. Due to the...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +31 more potentially affected by CVE-2026-54266 via @angular/common (>=20.0.0-rc.0, <=20.3.21)

@angular/common NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-54266 Source advisory: SNYK:JS-ANGULARCOMMON-17356555...

ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-54266 via @angular/common (22.0.0)

@angular/common NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-54266 Source advisory: SNYK:JS-ANGULARCOMMON-17356555...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +31 more potentially affected by CVE-2026-54266 via @angular/common (>=20.0.0-rc.0, <=20.3.21)

@angular/common NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-54266 Source advisory: OSV:GHSA-39PV-4J6C-2G6V...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +307 more potentially affected by CVE-2026-54266 via @angular/common (>=19.0.0-next.9, <=19.2.25)

@angular/common NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 - @aymendiva/angular-file-uploader 0.0.5 and more Source cves: CVE-2026-54266 Source advisory: OSV:GHSA-39PV-4J6C-2G6V...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +298 more potentially affected by CVE-2026-54265 via @angular/compiler (>=19.0.0-next.9, <=19.2.25)

@angular/compiler NPM version =19.0.0-next.9, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 - @aymendiva/angular-file-uploader 0.0.5 and more Source cves: CVE-2026-54265 Source advisory: OSV:GHSA-58W9-8G37-X9V5...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-54265 via @angular/compiler (>=20.0.0-rc.0, <=20.3.21)

@angular/compiler NPM version =20.0.0-rc.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-54265 Source...

GHSA-58W9-8G37-X9V5 @angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)

An issue in the @angular/compiler package allows bypassing DOM property sanitization through the use of two-way property bindings. Specifically, when a native DOM property that requires sanitization such as innerHTML, srcdoc, src, href, data, or sandbox is bound using the two-way binding syntax...