{"items":[{"id":"CVE-2026-101896","published":"2026-10-14T15:05:42.934Z","updated":"2026-10-20T01:32:46.385Z","title":"Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)","severity":"HIGH","score":8.2,"vendor":"angular","product":"angular","kev":false,"epss":0.00909,"kevAdded":null},{"id":"CVE-2026-69151","published":"2026-08-03T16:23:34.121Z","updated":"2026-08-03T21:19:24.394Z","title":"Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes","severity":"HIGH","score":7.6,"vendor":"angular","product":"angular","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2026-69149","published":"2026-08-03T16:14:39.636Z","updated":"2026-08-03T20:33:46.327Z","title":"Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)","severity":"HIGH","score":8.6,"vendor":"angular","product":"angular","kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2026-68945","published":"2026-08-03T15:58:02.299Z","updated":"2026-08-03T16:58:26.263Z","title":"Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning","severity":"HIGH","score":8.8,"vendor":"angular","product":"angular","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2026-32635","published":"2026-03-13T20:58:12.554Z","updated":"2026-03-17T03:55:33.785Z","title":"Angular has XSS in i18n attribute bindings","severity":"HIGH","score":8.6,"vendor":"@angular","product":"compiler","kev":false,"epss":0.00473,"kevAdded":null}]}