CVE-2026-101896

A flaw was found in @angular/router. When Server-Side Rendering SSR is enabled, the URL parser allocates disproportionate amounts of memory when handling numeric matrix parameters. An unauthenticated remote attacker can exploit this vulnerability by sending HTTP requests containing repeated numer...