CVE-2026-111752

The @angular/router component in Node.js server-side rendering (SSR) is vulnerable to a Denial of Service (DoS) via asymmetric resource consumption. The root cause is a failure to validate auxiliary outlet segments in the URL, allowing unconfigured empty-path outlet groups (e.g., x:/(...)) to tri...