Lucene search
+L

3 matches found

OSV
OSV
added 2026/06/22 4:16 p.m.6 views

DEBIAN-CVE-2026-54268

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, a Denial of Service DoS vulnerability exists in the @angular/common package of the Angular framework. The formatDate function,...

7.5CVSS5.9AI score0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/22 3:31 p.m.44 views

CVE-2026-54268 Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, a Denial of Service DoS vulnerability exists in the @angular/common package of the Angular framework. The formatDate function,...

8.2CVSS0.00327EPSS
SaveExploits0References3
Veracode
Veracode
added 2026/06/20 5:35 a.m.11 views

Denial Of Service (DoS)

@angular/common is vulnerable to Denial of Service DoS. The vulnerability is due to insufficient validation of the format parameter in the formatDate function, which allows an attacker to supply a maliciously crafted, excessively long date format string, causing excessive CPU and memory consumpti...

8.2CVSS5.8AI score0.00327EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder