Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Angular — Vulnerabilities & Security Advisories 45

All 45 CVE vulnerabilities found in Angular, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses associated with the Angular web framework developed by Google. The collection encompasses a comprehensive range of vulnerabilities, including cross-site scripting, prototype pollution, and improper input validation, covering the entire historical timeline from the framework's initial release to the most recent stable versions. Readers can utilize this resource to track official advisories issued by the Angular team, understand the specific characteristics and impact of distinct weakness classes prevalent in client-side JavaScript applications, or review the complete vulnerability history of the product to assess legacy risks in existing deployments. The data is curated from multiple authoritative sources to ensure accuracy and completeness without relying on unverified reports. By centralizing this information, the page serves as a critical reference for security professionals, developers, and auditors seeking to harden Angular-based applications against known threats. It enables efficient identification of affected versions and provides context for remediation strategies, helping organizations maintain robust security postures while managing complex software dependencies. This aggregation supports proactive defense by highlighting patterns in past exploits and facilitating timely updates to mitigate potential attacks before they compromise sensitive data or system integrity.

Vendor: unspecified

CVE ID Title CVSS Severity Published
CVE-2026-49241 Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension CWE-79 - - 2026-06-22
CVE-2026-50557 Angular: Template and Attribute Namespace Sanitization Bypass (XSS) CWE-79 - - 2026-06-22
CVE-2026-41423 Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server CWE-918 9.1AI Critical AI 2026-05-08
CVE-2026-27970 Angular i18n vulnerable to Cross-Site Scripting (XSS) CWE-79 6.1AI Medium AI 2026-02-26
CVE-2026-22610 Angular has XSS Vulnerability via Unsanitized SVG Script Attributes CWE-79 6.1 - 2026-01-10
CVE-2025-66412 Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes CWE-79 6.1AI Medium AI 2025-12-01
CVE-2025-66035 Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs CWE-201 6.5AI Medium AI 2025-11-26
CVE-2025-59052 Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage CWE-362 5.9AI Medium AI 2025-09-10
CVE-2024-21490 angular 安全漏洞 CWE-1333 7.5 High 2024-02-10
CVE-2023-26116 Angular 安全漏洞 CWE-1333 5.3 Medium 2023-03-30
CVE-2023-26118 Angular 安全漏洞 CWE-1333 5.3 Medium 2023-03-30
CVE-2023-26117 Angular 安全漏洞 CWE-1333 5.3 Medium 2023-03-30
CVE-2022-25869 Angular 跨站脚本漏洞 CWE-79 4.2 Medium 2022-07-15
CVE-2021-4231 Angular Comment cross site scripting CWE-79 3.5 Low 2022-05-26
CVE-2022-25844 Regular Expression Denial of Service (ReDoS) 5.3 Medium 2022-05-01

All 45 known CVE vulnerabilities affecting Angular with full Chinese analysis, references, and POCs where available.