12945 matches found
CVE-2026-111752
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, @angular/router in Node.js server-side rendering fails to require auxiliary outlet URL segments to match routes configured for...
CVE-2026-111752
The @angular/router component in Node.js server-side rendering (SSR) is vulnerable to a Denial of Service (DoS) via asymmetric resource consumption. The root cause is a failure to validate auxiliary outlet segments in the URL, allowing unconfigured empty-path outlet groups (e.g., x:/(...)) to tri...
Smersh
SMERSH Smersh is a pentest oriented collaborative tool used to track the progress of your company's missions and generate rapport. Preview front Angular: Documentation All information is available at the following address: https://cmepw.github.io/documentation/ How to contribute ? Just fork...
CVE-2024-54152
⚙️🔨 IN PROGRESS CVE-2024-54152 POC Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclose...
CVE-2024-42640
CVE-2024-42640 angular-bug CVE-2024-42640 Unauthenticated Remote Code Execution via Angular-Base64-Upload Library for more details: blog Introduction angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the angular-base64-upload/demo/server.p...
CVE-2023-34840
CVE-2023-34840 Vulnerability Explanation All versions in angular-ui-notification are vulnerable to XSS due to the library not sanitizing the input provided by the user. In order to safely use this library, sanitizing / encoding the parameters passed to this library is highly recommended, such as...
roninforge-angularjs-migration
roninforge-angularjs-migration Source-of-truth repo for the AngularJS to Angular 18 GitHub Copilot instructions package shipped to github/awesome-copilot at instructions/angularjs-to-angular-18.instructions.md. First in a planned series of enterprise-targeted Copilot products from RoninForge...
CVE-2024-42640
CVE-2024-42640 Unauthenticated Remote Code Execution via Angular-Base64-Upload Library CVE-2024-42640 Angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the angular-base64-upload/demo/server.php endpoint. Exploiting this vulnerability allow...
CVE-2026-32635-Angular-XSS-Mitigation-
CVE-2026-32635: Angular i18n Attribute XSS - Mitigation & Detection PoC 📌 Overview This repository contains an educational demonstration of the mitigation and detection for CVE-2026-32635 , a Cross-Site Scripting XSS vulnerability in Angular that affects internationalized i18n attributes...
CVE-2026-22610
Angular SVG Vulnerability Scanner CVE-2026-22610 Purpose: Scan Angular projects for potential XSS vulnerabilities in SVG Usage Run the script from the project root: Scan current folder node scan-angular-svg-vuln-final.js Scan a specific folder node scan-angular-svg-vuln-final.js /project1/src...
CVE-2026-27739-POC
-CVE-2026-27739-poc curl -H "X-Forwarded-For: http://169.254.169.254/latest/meta-data/" self.target 2. Header Injection via Prototype Pollution CVSS: 7.5 Description : Angular SSR processes unsafe query parameters affecting prototype chain Impact : Request header manipulation, potential SSRF...
DSpace__DSpace_CVE-2022-31192_5-100
DSpace DSpace Documentation | DSpace Releases | DSpace Wiki | Support Overview DSpace open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. For more information, visit...
Security Bulletin: IBM ApplinX is vulnerable to multiple vulnerabilities due to use of Angular router and fast-uri libraries.
Summary IBM ApplinX is vulnerable to multiple vulnerabilities due to use of third-party libraries: Angular router @angular/router is vulnerable to an improper neutralization of input during web generation vulnerability no CVE assigned. ID: WS-2026-0104; fast-uri is vulnerable to multiple...
CLSA-2026-1793093788 TuxCare security update for @angular (3 CVEs)
TuxCare rebuilt 2 @angular packages to address 3 CVEs. Fixed in 19.2.25-tuxcare.7...
CLSA-2026-1792931815 TuxCare security update for @angular/language-service (1 CVE)
TuxCare rebuilt @angular/language-service to address 1 CVE. Fixed in 18.2.13-tuxcare.6...
CLSA-2026-1792814872 TuxCare security update for @angular/language-service (6 CVEs)
TuxCare rebuilt @angular/language-service to address 6 CVEs. Fixed in 18.2.13-tuxcare.5...
CLSA-2026-1792762614 TuxCare security update for @angular/language-service (4 CVEs)
TuxCare rebuilt @angular/language-service to address 4 CVEs. Fixed in 19.2.14-tuxcare.7...
CLSA-2026-1792762111 TuxCare security update for @angular/language-service (3 CVEs)
TuxCare rebuilt @angular/language-service to address 3 CVEs. Fixed in 19.2.18-tuxcare.7...
