Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

JavaScript Library

Angular

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

Official Site:

https://angular.io/

Severity Summary:

High: 4 Medium: 18
Reference
Title
Severity
CVE-2024-21490
Angular Inefficient Regular Expression Complexity Vulnerability
High
CVE-2026-50168
Angular Origin Validation Error Vulnerability
High
CVE-2026-50170
Angular Use of Cache Containing Sensitive Information Vulnerability
High
CVE-2026-54268
Angular Uncontrolled Resource Consumption Vulnerability
High
CVE-2026-52725
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-50169
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2026-50171
Angular Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2026-50184
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2026-50555
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-50556
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-50557
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-54264
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2021-4231
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-54265
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-54266
Angular Use of Weak Hash Vulnerability
Medium
CVE-2026-54267
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-41423
Angular Server-Side Request Forgery (SSRF) Vulnerability
Medium
CVE-2026-27970
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-22610
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-66412
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-61261
Angular Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-46417
Angular Server-Side Request Forgery (SSRF) Vulnerability
Medium