A
Vendor security profile
angular
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs28
Critical0
CISA KEV0
Public exploit6
Patch rate%86
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
1
0
0
0
15
0
3
5
4
CVE KEV
CVE severity distribution
28toplam CVE
High11 (39%)
Medium17 (61%)
Patch and exploitation view
%86
Verified patch
%0
CISA KEV
%21
Public exploit
23Patch available
1Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
8.2
CVE-2026-101896Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
Patch status unknownEPSS %1
5.1
CVE-2026-101897Angular DevTools (Local DoS)
Patch status unknownEPSS %0
8.7
6.3
CVE-2026-104871Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows
Patch status unknownEPSS %0
4.0
8.6
7.6
CVE-2026-69151Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
Partial patchEPSS %0