Denial Of Service (DoS)

🗓️ 01 Oct 2026 06:38:16Reported by Veracode Vulnerability DatabaseType

Remote DoS in @angular/router via excessive memory allocation for numeric matrix parameters.

Reporter	Title	Published	Views	Family All 13
CVE	CVE-2026-101896	30 Sep 202615:40	–	cve
Github Security Blog	Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters	30 Sep 202615:40	–	github
Mend	CVE-2026-101896	30 Sep 202618:19	–	mend
OSV	GHSA-FF3F-86QR-9CV3 Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters	30 Sep 202615:40	–	osv
Positive Technologies	PT-2026-103484	30 Sep 202600:00	–	ptsecurity
Snyk	Allocation of Resources Without Limits or Throttling	30 Sep 202615:40	–	snyk
vulnersOsv	@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +36 more potentially affected by CVE-2026-101896 via @angular/router (>=21.0.0, <=21.2.22)	30 Sep 202615:40	–	vulnersosv
vulnersOsv	@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2026-101896 via @angular/router (>=20.0.0, <=20.3.25)	30 Sep 202615:40	–	vulnersosv
vulnersOsv	3d-card (0.0.2), 4byte-peru-components (1.0.0) +282 more potentially affected by CVE-2026-101896 via @angular/router (>=19.0.0, <=19.2.25)	30 Sep 202615:40	–	vulnersosv
vulnersOsv	@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +36 more potentially affected by CVE-2026-101896 via @angular/router (>=21.0.0, <=21.2.22)	30 Sep 202615:40	–	vulnersosv

Vulners

Node

synology router_managerRange20.0.0–20.3.31js

synology router_managerRange22.0.0–22.2.0-rc.0js

synology router_managerRange21.0.0–21.2.23js

synology router_managerRange0.0.0-0–19.2.25js

Source	Link
github	www.github.com/angular/angular/commit/5af61216eab8bf4a6697a1d79bda3d857c06f89d
github	www.github.com/angular/angular/pull/70717
github	www.github.com/angular/angular/issues/70716
github	www.github.com/angular/angular/commit/03872a80bcf1c89b2b04cdd3f444b2ee954da583
github	www.github.com/angular/angular/commit/ddfe21072ba32ca4cd9d7d3c6b7df66af81d58c4
github	www.github.com/advisories/GHSA-ff3f-86qr-9cv3

07 Oct 2026 17:34Current

6.1Medium risk

Vulners AI Score6.1