angular angular

Name: angular angular
Brand: angular

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical5high16medium0low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-22610US	medium6.1	0.44% (38th)	Exploit	21.0.7	2026-01-10	4 versions
CVE-2025-66035US	—	0.72% (54th)	—	21.0.1	2025-11-26	3 versions
CVE-2026-54268US	high7.5	0.58% (48th)	—	22.0.1	2026-06-22	4 versions
CVE-2026-27970US	medium6.1	0.55% (46th)	—	21.2.0	2026-02-26	5 versions
CVE-2026-50178US	high8.8	0.50% (43rd)	—	no fix	2026-06-22	≤ < 21.2.4
CVE-2026-52725US	medium6.1	0.46% (40th)	—	20.3.22	2026-06-22	5 versions
CVE-2026-50170US	high7.5	0.43% (37th)	—	19.2.23	2026-06-22	5 versions
CVE-2025-66412US	medium5.4	0.41% (35th)	—	20.3.15	2025-12-01	4 versions
CVE-2026-50556US	medium6.1	0.41% (35th)	—	22.0.0-rc.2	2026-06-22	5 versions
CVE-2026-50557US	medium6.1	0.41% (35th)	—	19.2.22	2026-06-22	5 versions
CVE-2026-54264US	medium6.1	0.39% (33rd)	—	21.2.17	2026-06-22	4 versions
CVE-2026-54267US	medium6.1	0.38% (32nd)	—	21.2.17	2026-06-22	4 versions
CVE-2026-46417US	medium6.1	0.36% (30th)	—	19.2.22	2026-06-22	5 versions
CVE-2025-59052US	—	0.36% (29th)	—	18.2.14	2025-09-10	9 versions
CVE-2026-54265US	medium6.1	0.34% (28th)	—	21.2.17	2026-06-22	4 versions
CVE-2026-41423US	medium5.3	0.30% (23rd)	—	20.3.19	2026-05-08	4 versions
CVE-2026-50555US	medium6.1	0.27% (19th)	—	20.3.24	2026-06-22	5 versions
CVE-2026-50171US	medium6.1	0.26% (17th)	—	20.3.22	2026-06-22	5 versions
CVE-2026-49241US	high8.8OT elevated	0.24% (15th)	—	no fix	2026-06-22	≤ < 21.2.4
CVE-2026-50168US	high8.2	0.24% (15th)	—	21.2.15	2026-06-22	5 versions
CVE-2026-50169US	medium6.1	0.23% (13th)	—	22.0.0-rc.2	2026-06-22	5 versions
CVE-2026-50184US	medium6.1	0.21% (11th)	—	21.2.15	2026-06-22	5 versions
CVE-2026-54266US	medium6.1OT elevated	0.13% (2nd)	—	21.2.17	2026-06-22	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-524Use of Cache Containing Sensitive Information3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-359Exposure of Private Personal Information to an Unauthorized Actor2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan